The Lesotho PostBank your only Basotho bank invites suitably qualified candidates to apply for the following vacant position:
Job Title : Information Security Administrator
Reports to : Head of IT
Location : Maseru
JOB PURPOSE
Reporting directly to the Head of IT, the position creates and develops security measures and controls to safeguard information against accidental or unauthorized modification, destruction, or disclosure. Interacts and coordinates with management, developers, vendors, auditors, Information Technology staff, and other stakeholders to identify and plan for security in all aspects of data, software applications, hardware, wired/wireless communications, computer installations and facilities.
DUTIES AND RESPONSIBILITIES
•Implements and monitors the adoption of information security policy and IT governance frameworks;
•Performs information risk assessments and guides business users on the appropriate risk control measures and practices;
•Performs information security requirements analysis and specification as required for IT solution acquisition, development and maintenance;
•Determines and audits users access rights including privileged users such as administrators and power users;
•Designs and implements cryptographic controls, key management and policy on public access to Bank’s information assets;
•Manages the periodic maintenance and update of information security systems and tools (including antivirus system and firewalls) to ensure new threats are identified and averted;
•Protects and analyses access logs, audit trails and traces information for unauthorised access and points of vulnerability;
•Participates in IT risk self-assessment, risk analysis, rating and provides control recommendations using the established Enterprise Risk Management framework;
•Provides a holistic view of information risks through comprehensive reporting on the Bank’s information assets introduced by personnel, processes, technology and external events;
•Coordinates information security incident response planning and investigation of information breaches and assists with disciplinary and legal matters associated with such breaches if necessary;
•Regularly reviews Information Technology General Controls (ITGC) and application controls and liaise with the Bank’s compliance, internal and external audit teams;
•Participates and subscribes to information security awareness groups, industry education and networking events in order to keep abreast on best practices to prevent cyber risk;
•Liaises with vendors and suppliers to ensure full adherence to the Bank’s policies through contracts and associated services;
•Plans and addresses information security aspects of business continuity;
•Conducts information security awareness training for staff and management;
•Actively participates in regular one on one performance discussions with the line manager.
•Actively participates in regular meetings with IT and Risk on common issues and challenges faced by the Lesotho PostBank;
•Compiles monthly information risk reports for management reporting;
•Reports regularly to the line manager on assignments, security incidents and project activities.
EDUCATIONAL REQUIREMENTS
•Bachelor’s Degree in Information Technology/Computer Science or equivalent;
•A minimum of at least 2 years’ experience in IT Security and generic IT Support;
•Relevant professional certification will be an added advantage.
GENERAL KNOWLEDGE, SKILLS AND ABILITIES
•Knowledge of international standards;
•Persuasion and assertiveness;
•Social intelligence;
•Risk Management;
•Ability to coordinate and perform multiple tasks/projects simultaneously, balancing priorities and deliverables;
•Critical and analytical thinking;
•Organisational and time management skills;
•Ability to work well within a team environment and participate in departmental projects.
How to Apply
Applications (including names of three referees) accompanied by certified copies of relevant certificates should be emailed to [email protected]/ or to [email protected] or hand delivered to:
Human Resources Department
Lesotho Postbank
MafikeHouse, 1st Floor
Maseru, Lesotho
The closing date for submission of applications is 07th February, 2019.
DISCLAIMER: ONLY SUCCESSFUL CANDIDATES WILL BE CONTACTED.