Principal Officer - Information Risk and Compliance - SAFARICOM

Reporting to the Head of Department - Enterprise Risk, the role holder is responsible for developing, implementing and maintaining a comprehensive programme to assess and mitigate current and emerging risks that impact the integrity, availability, accountability and confidentiality of information assets and the information environment in order to assure compliance with policy and regulatory requirements

Detailed Description

• Review and ensure adequate policies are implemented to manage Information risk across the company
• Provide guidance in the interpretations of current policies related to specific situations as they arise and conduct policy exception reviews 
• Create awareness on information risk and the policies in place across the organization 
• Develop and monitor the performance of Information management policies, standards, guidelines and procedures across the organization
• Conduct enterprise information risk assessments at agreed regular intervals to assess and track the health of information management across the organization 
• Follow up and ensure agreed upon action points are implemented effectively and on time
• Perform ad-hoc risk assessments as per managements’ request
• Offer guidance on security risks on emerging threats and advise the business accordingly. 
• Offer specialist guidance & advisory to other business units for timely assurance of key / special projects.
• Offer guidance and support on the planning, implementation, monitoring and review of the Information Security Management System 
• Support the implementation and maintenance of a robust framework to adequately collect, audit and monitor logs across critical systems

Job Requirements

• Degree in IT, Business Information Systems (or related technical field) from a recognized university Holder of at least one of the following certifications: CISA, CISM or CISSP 
• At least 4 years proven working experience in operational management of Information Systems / Information Security / Information Systems Audit role, or proven experience in business process assurance and/or risk analysis preferably in a telecommunications environment
• Detailed knowledge of GSM and IT Networks is essential

Apply Now