Business Information Security Officer (BISO) at Daystar Power Energy Solutions

Daystar Power is a leading off-grid power service provider, offering hybrid power solutions to commercial and industrial businesses in West Africa. Daystar Power’s solutions “Solar-as-a-Service” (100% solar power) and “Power-as-a-Service” (hybrid power solutions with battery storage) provide clean and reliable power while significantly reducing clients’ overall power costs.

Daystar Power counts the region’s leading industrial and commercial companies among its client base. Daystar is active in Nigeria, Ghana, Togo and Senegal with a representative office in Cote d’Ivoire.

We are recruiting to fill the position below:

Job Title: Business Information Security Officer (BISO)

Location: Lagos
Employment type: Full-time

Job Summary

• We are looking to engage a competent and experienced Business Information Security Officer (BISO) whose principal responsibility would be to ensure that Daystar IDT stay in control of information risks and compliance; even as we enable Business opportunities, while empowering Daystar’s workforce to have security in their DNA as we continuously improve the basic security of our digital landscape from the Lagos - Nigeria office.
• We are seeking a hard-working, self-motivated, and well-organized individual with a focus on continuous improvement to exceed expectations.
• The BISO is responsible for all IT Governance, Risk, Compliance and Assurance.

Description
BISO is the Daystar cyber and information security lead responsible for:

• Risk-based cyber and information security protection.
• Ensuring risks are considered at the inception of every IT project.
• Leveraging the risk advisory team to manage the end-to-end Group CISO risk management processes as needed.  
• Ensuring security and compliance with key standards and policies, minimizing Daystar’s exposure to preventable risks and unlocking value.
• Guiding Daystar’s Business/Functions to adapt Group CISO requirements by balancing value, affordability, do-ability and absorbability against risk exposure.
• Interfacing with Group CyberDefense Team when an incident occurs, managing the incident to closure, in other to protect Daystar’s landscape (systems, networks, and data) from cyber threats; ensuring the safety and security of sensitive information; and ensuring the confidentiality, integrity and availability of data by implementing robust defence mechanisms.
• Manage IT security and operations risks, ensuring Daystar IDT can deliver secure and reliable products and services to the entire Group. The jobholder would also be responsible for ensuring risks to information assets are identified and understood, that appropriate action is taken to mitigate risks and that there is sustained compliance of the organisation / business unit and its associated customers, users, suppliers or partners with the controls framework and related policies, standards and processes.

Key Responsibilities

• Interfacing with Group CyberDefense Team when an incident occurs, managing the incident to closure, in order to protect Daystar’s landscape (systems, networks, and data) from cyber threats.
• Single point of contact for control, compliance and operations risk.
• Ensure IRM activities (e.g. risk acceptance, vulnerability, IRM projects, compliance status) are visible and actioned across Daystar. Reporting for Daystar Business and IDT leadership and facilitate review, escalation, drive implementation.
• Design and own Daystar Control and Compliance reporting & dashboard.
• Drive change and implement simplification including elimination.
• Drive gamification approach for Compliance and Control.
• Lead Daystar Think Secure Champions network.
• Act as Operational Readiness Framework Lead/Focal Point for Daystar.
• End-to-end accountable for the coordination and timely execution of outbound assurance to customers, partners and regulatory bodies.
• Work hand in hand with other BISOs, IDT community and business orchestrating execution of outbound assurance queries from customers, partners and regulatory bodies.
• Provide internal Assurance Services (incl. Testing): Performing end-to-end Compliance Testing on controls put in place to minimise risk. Focused Risk Reviews and Process Walk through for IT applications/processes to identify unmitigated risks.

Requirements

• Interested candidates should possess relevant qualifications. 

Benefits

• Opportunity to work in a forward-looking, innovative company, with international group of colleagues.
• Unlimited career opportunities - depending on achievements and personal development.
• A competitive salary and benefits package with long term prospect in a fast-growing company.

Application Closing Date
Not Specified.

How to Apply
Interested and qualified candidates should:
Click here to apply online

Note

• Daystar Power Group is an equal opportunity employer, committed to promoting diversity and inclusion in the workplace.
• We prohibit all forms of discrimination and harassment based on race, colour, gender, religion, sexual orientation, national origin, disability, genetic information, pregnancy or any other characteristic protected by federal, state or local law.
• Only shortlisted candidates will be contacted.
• Qualified women are encouraged to apply.