Cardstel Solutions Limited - Our company is a world class commercial printing and card manufacturing outfit, for paper, plastic and smart cards. We are equipped with one of the most recent machinery and state of the art associated equipment, fully functional to ensure that every process of manufacturing or production is done and delivered with the highest of quality.
We are recruiting to fill the position below:
Job Title: Chief Information Security Officer (CISO)
Location: Lagos
Position Summary
- This is a senior leadership position responsible for establishing and maintaining a comprehensive, system-wide information security program to ensure that information assets are adequately protected.
- This includes aspects of corporate and regulatory compliance, administrative functions, risk management, as well as physical and technical security of corporate IT infrastructure and Cardstel’s backbone network systems.
- Supervisory Responsibilities (in relation to other staff): Line managing a team of two security experts.
Main Responsibilities
The majority of the work involves:
- Line managing a team of security experts, who will take responsibility for the implementation of advanced security features as well as providing support in the handling of high profile and escalated security incidents
- Overseeing and/or assisting in performing on-going security monitoring and continuous improvement of information systems including risk assessment, gap analyses, new security capabilities assessments and recommendations
- Establishing and maintaining processes to ensure that all users are trained to conduct themselves in a manner which ensures they fulfill their IT/IS security responsibilities
- Oversee regulatory compliance, establish and implement cyber security-related policies and establish and oversee the organization's security architecture
Working closely with:
- IT and software development staff to ensure that all solutions/software proposed by their teams are compliant with security policies
- Chief Network Operations Officer to ensure that all the network services are compliant with security policies
- Head of Operations to support the handling of security incidents
- Senior executives to establish disaster recovery (DR) and business continuity plan
Person Specification, Qualifications, Skills, Experience and Knowledge Required (Essential)
- Bachelor's Degree (Masters preferred) in Computer Science, Computer Information Systems, Management Information Systems, Business Administration, or other related field required
- Significant experience in a large, complex environment with primary focus of activities in information security, with at least two years in a direct, senior leadership role with information security
- Ability to lead the development/adoption and collaboratively enforce comprehensive information security policies, procedures and standards
- Broad and current understanding of security risks and controls
- Demonstrable experience of working closely with IT/IS functions to establish pragmatic/optimum security infrastructure solutions to identified risks
- Proficient in taking complex/technical subject matter and refining/presenting to the business at any level so as to result in understanding and appreciation
Personal Skills and Attributes:
- Proven experience in communicating effectively with senior management, especially when sensitive issues are involved
- Strong relationship building and collaboration skills
- Flexibility and willingness to partner with key stakeholders
- Entrepreneurial look at bringing security solutions to the community
Desirable:
- Specialization in information security or forensics preferred
- CISSP, CISM, CISA, CCSK, PCI DSS qualifications
- Working knowledge of ISO 27001, Data Protection and other regulatory environments
- ITIL V3, CobiT, COSO
Application Closing Date
Not Specified
How to Apply
Interested and qualified candidates should send their cover letters and CV's to:
[email protected] using the position applied for as the subject of the mail.
Note: Only shortlisted candidates will be contacted.