Africa Golden Bank is hiring an IS Security Officer

Africa Golden Bank S.A. is recruiting a Head of IT Security (RSSI). Under the authority of the head of the risk department, the incumbent of the position will have the overall mission to manage, structure and secure the information systems of the institution.

IS Security Governance and Strategy

This will be to define and apply the policy of protection of information systems, to guarantee the compliance of the security device with the rules and standards in force (banking requirements, ISO 27001, ISO 22301, PCI-DSS, etc.), to ensure the control of risk and performance indicators related to data security, and to get involved in the incorporation of security within business projects.

Risk management and compliance

The job involves detecting and gauging SSI threats, then collaborating with technical and business teams to implement corrective actions. It will also be necessary to conduct risk assessments and conduct safety audits, monitor the implementation of recommendations from SSI inspections and audits, and design reports for senior management, competent authorities and risk committees.

Business continuity and operational resilience

The manager will be involved in the development of IT recovery and continuity plans, in conjunction with the ARP and the BCP. It will plan the testing of the BCP and ensure follow-up of corrective actions resulting from these tests, while ensuring uninterrupted operation of critical systems during a major incident.

Identity and access management

This function includes the contribution to the creation of authorization grids and the review and revision of access rights.

Operational security

This will include overseeing the protection of databases, applications, networks and infrastructure; ensuring the deployment of monitoring, backup, encryption and access control tools; addressing vulnerabilities and resolving security incidents; and organizing responses to cyber attacks and security breaches.

Candidate profile

The candidate must hold an engineering degree or a Bac+5 (Master 2) specializing in cybersecurity, information systems security or an equivalent degree.

Experience

A minimum of 5 years experience in SSI or an equivalent function is required, a move into the banking sector being an advantage. The following certifications are highly appreciated: ISO 27001 Lead Implementer / Lead Auditor, ISO 22301 Lead Implementer, ISO 27005, Ebios Risk Manager, CEH, CISSP, CISA or CISM.

Technical knowledge and skills

The position requires mastery of security solutions (DLP, PAM, SIEM, vulnerability scanners, etc.), understanding of the regulatory obligations applicable to IT security in the CEMAC area, a good knowledge of PCI-DSS, ISO 22301 and ISO 27001 standards, as well as an understanding of banking activities and systems environments and Core banking. A fluid use of office software and bilingualism (French-English) would be a real asset.

Interpersonal skills and leadership

The candidate will have to demonstrate a deep respect for ethics and confidentiality, a great sense of organization and rigor, good synthesis and analysis skills, and an ease in being a force for proposal. They will also need to demonstrate excellent persuasive and communicative skills, an ability to manage crisis contexts and work under pressure, as well as strong leadership and the ability to interact with interlocutors at all levels.

[Click the Apply button below to apply, and Create my CV to build a CV tailored to this offer, professionally]