JOB DESCRIPTION
| POST TITLE | INFORMATION SECURITY ANALYST | ||
| DIVISION/DEPARTMENT | ICT | ||
| REPORTS TO | MANAGER – NETWORK & INFRASTRUCTURE | GRADE | I |
JOB SUMMARY
The Information Security Analyst is responsible for monitoring, assessing, and enhancing the security posture of Lerotholi Polytechnic’s (LP) ICT environment. The incumbent will play a key role in identifying vulnerabilities, implementing security measures, responding to incidents, and ensuring compliance with cybersecurity standards and policies, while also managing and supporting the administration of CCTV systems. This role supports the institution’s efforts to protect data, systems, and digital assets across academic and administrative functions.
RESPONSIBILITIES
MAIN TASKS
- Monitor and analyse security events/alerts from network and security systems (e.g., firewalls, antivirus, intrusion detection/prevention systems).
- Conduct regular vulnerability assessments and penetration tests on institutional systems and networks and recommend mitigation strategies.
- Investigate, document, and respond to cybersecurity incidents, coordinating recovery and reporting.
- Enforce ICT security policies, standards, and procedures in line with best practices.
- Administer and maintain the institution’s CCTV surveillance systems, ensuring optimal functionality, secure access, and data retention compliance.
- Oversee CCTV footage retrieval processes for investigative or disciplinary matters, ensuring proper logging and chain of custody in line with the CCTV policies.
- Ensure physical security controls (including CCTV) are integrated into the overall information security framework.
- Conduct access control reviews, manage user permissions, and audit privileged accounts.
- Conduct user awareness initiatives and training sessions to promote cybersecurity best practices among staff and students.
- Maintain and test disaster recovery and incident response plans in collaboration with ICT teams.
- Track and report on compliance with data protection and cybersecurity regulations.
- Prepare reports on risk assessments, security audits, and system status for internal and governance review.
- Stay informed on emerging threats and evolving technologies to proactively recommend enhancements for defence.
NB: Because of the changing nature of the Polytechnic’s business, the job description will inevitably change. The candidate will, from time to time, be required to undertake other activities of a similar nature that fall within his/her capabilities as directed by management.
Generic Competencies:
- Strong analytical and problem-solving skills
- Excellent attention to detail and organisational ability
- Ability to work under pressure and handle sensitive information with discretion
- Clear and concise communication skills (written and verbal)
- Strong team orientation and collaborative spirit
- Ethical and proactive approach to information protection
JOB SPECIFICATION
Qualifications and Experience
- Diploma in Computer Systems Engineering or related field.
- 2 – 3 years of experience in information security or a network/system administration role with security responsibilities
- Knowledge of security frameworks (e.g., ISO/IEC 27001, NIST), and common standards (e.g., GDPR, Data Protection Act, 2011).
- Familiarity with security tools and technologies such as SIEM, endpoint protection, firewalls, and encryption.
- Professional certification in Cybersecurity or information security.
TO APPLY:
Interested and suitably qualified candidates should apply by email to: [email protected] – all application documents should be in one zipped folder and failure to adhere will lead to non-consideration of applications.
The application letters should be accompanied by: Curriculum Vitae, certified copies of educational certificates and academic transcripts. The deadline for submission of applications is 23rd September, 2025.
Applications should be addressed to:
The Secretary
Staff Appointments and Promotions Committee
Lerotholi Polytechnic
P.O. Box 16
Maseru 100
Lesotho
Disclaimer – only short-listed applicants will be contacted.