Information Security Officer at a Healthcare Services Company - Deloitte Nigeria

Deloitte Nigeria - Our client in the Healthcare Services sector is recruiting a skilled and experienced candidate to join the organization in the capacity below:

Job Title: Information Security Officer

Location: Abuja
Employment Type: Full-time

Job Description

• This role will be responsible for developing, implementing, and maintaining the client's information security program, as well as protecting its data and systems from cyber threats.
• Develop, implement, and maintain information security policies, procedures, and standards aligned with industry best practices and regulatory requirements
• Conduct regular risk assessments and vulnerability scans to identify potential security threats and vulnerabilities
• Design and implement security controls to mitigate identified risks and protect organizational assets
• Monitor and analyze security events and incidents, leading incident response efforts when necessary
• Manage the organization's security awareness program, providing training and guidance to employees on security best practices
• Collaborate with IT teams to ensure the secure configuration and maintenance of network infrastructure, systems, and applications
• Stay up-to-date with emerging cybersecurity threats and trends, recommending and implementing appropriate countermeasures
• Ensure compliance with relevant data protection laws and regulations, including Nigerian data protection requirements
• Perform regular security audits and assessments to evaluate the effectiveness of security controls and identify areas for improvement
• Manage relationships with external security vendors and service providers
• Report on security status, incidents, and metrics to senior management and relevant stakeholders

Qualifications

• Bachelor's Degree in Computer Science, Information Technology, or a related field
• 5+ years of experience in information security or a related field
• In-depth knowledge of information security frameworks such as ISO 27001 and NIST
• Strong understanding of risk assessment and management methodologies
• Proficiency in various cybersecurity tools and technologies
• Experience in implementing and managing comprehensive security programs
• Excellent knowledge of network security, data protection, and privacy regulations
• Familiarity with Nigerian data protection laws and regulations
• Strong analytical and problem-solving skills with attention to detail
• Excellent communication and interpersonal skills
• Ability to work efficiently in a fast-paced, dynamic environment
• Relevant certifications such as CISSP, CISM, or CompTIA Security+ are preferred
• Experience in incident response and management
• Proven track record in developing and implementing security policies and procedures
• Strong understanding of emerging cybersecurity threats and trends
• Knowledge of compliance and regulatory requirements in the Nigerian context.

Application Closing Date
Not Specified.