Orabank is hiring an Information Systems Security Manager Lomé

Orabank is hiring an Information Systems Security Manager (ISSI) to LoméIn Togo.

The incumbent will be responsible for defining and implementing the information systems security policy, as well as developing and updating the security master plan. It must ensure that the security device complies with applicable standards and regulations, including ISO 27001, PCI-DSS, GDPR and banking requirements. The monitoring of performance and risk indicators related to information security is also part of its remit.

It will be responsible for identifying, assessing and addressing risks, conducting risk analyses and coordinating security audits. It will prepare reports for the General Management and competent authorities. Monitoring the security of infrastructure, networks, applications and databases is essential, as is ensuring the implementation of access control, encryption, backup and monitoring devices.

The role involves overseeing vulnerability management and handling security incidents, as well as coordinating responses to cyber threats and major incidents. The candidate will participate in the implementation of IT continuity and recovery plans (PCA and PRA), organize the tests of the continuity plan and ensure the follow-up of action plans.

He will develop and lead cybersecurity awareness programs, train and support technical and business teams on good security practices. The coordination of the activities of teams and partners working in the field of information security, the management of relations with specialized service providers and audit firms, as well as participation in strategic digital transformation projects by integrating security requirements, are an integral part of the role. A technological watch in terms of information system security and reliable reporting to the Risk Department and the CISO Group are also expected.

Candidate profile

The candidate must hold an Engineering degree or a BAC + 5 in Computer Science, Cybersecurity, Networks and Telecommunications or equivalent. A good knowledge of the architecture and urbanization of information systems is required, as well as a mastery of security technologies and solutions (firewalls, SIEM, identity and access management, cryptography, PKI, intrusion testing, data protection). The candidate must also be familiar with security standards and frameworks (ISO 27001, NIST, COBIT, PCI-DSS), risk analysis and management tools, and the regulatory requirements applicable to the banking sector.

The position requires a minimum of ten (10) years of work experience in the IT field, including at least five (05) years in information systems security or cybersecurity. A good command of professional English is required. Professional certifications such as CISSP, CISA, CISM, CRISC or CGEIT are an asset.

Behaviourally, the company seeks a person with a high sense of confidentiality and ethics, demonstrating integrity, rigour and organization, with a spirit of analysis and synthesis. An ability to anticipate and manage risks, a strength of proposal, excellent communication and persuasion skills, as well as an ability to work under pressure and manage critical situations are essential. Leadership and the ability to interact with interlocutors of all levels are also expected. Female candidates are strongly encouraged.

Required documents

A CV and a cover letter.

[Click the Apply button below to apply, and Create my CV to build a CV tailored to this offer, professionally]