Local Information Security Officer M/F

Responsabilités

Africa Global Logistics Rwanda Limited, a company duly incorporated under the laws of Rwanda and its offices at Kigali Special Economic Zone, P. O. Box 1338, Kigali, Rwanda is specialised in transport and logistics The LISO is responsible for ensuring appropriate controls are in place for the security of information systems. The LISO safeguards information by seeing that security risks are identified, assessed and accurately reported. Additionally, the LISO is charged with ensuring local procedures and activities comply with all regulatory requirements and internal security policies, procedures, guidelines and standards. KEY DUTIES & RESPONSIBILITIESApply and distribute the Central Information System Security Policy, Adapt the ISSP to the concerned perimeter, if necessary, disseminate the elements of ISSP within the entity, control the correct application of the ISSP on the perimeter.Apply central information security strategies, both short-term and long-range, in application of the Bollore group.Thoroughly conduct and complete annual reviews and audits as required by engaging both internal business partners across the region and external parties.Management of LISO security team to oversee ongoing activities in cyber security within the region.Directs an ongoing, proactive risk assessment program for all new and existing systems and remains familiar with the current goals and business processes of the Bollore group so effective controls can be put in place for those areas presenting the greatest information security risk in the Eastern Africa region.Communicates risks and recommendations to mitigate risks to senior management so decisions can be made to ensure the security of information systems.Oversees ongoing activities related to the development, implementation, and maintenance of the information security policies and procedures by ensuring these policies and procedures encompass the overall security of information security at rest or in motion within the groups systems and assisting in compliance of departments local processes and procedures, ensuring they are not in conflict with company policies.Apply and assist in implementing BCP (Business Continuity Plan) and DRP (Disaster Recovery Plan) procedures within the region.Acts proactively to prevent potential security incidents by ensuring that proper protections are in place, such as intrusion detection and prevention systems, firewalls, and effective physical safeguards, and provides for the availability of computer resources by ensuring a business continuity/disaster recovery plan is in place to offset the effects caused by intentional and unintentional acts.Ensure that local regulatory and contractual provisions on personal data protection are done and met throughout the region.Accompany countries within the region, in the application of the ISSP.Provide visibility KPI’s on incidents and security indicators on the Eastern Africa perimeter.Develops information security awareness training and education programs, but also participates in local, regional, and worldwide awareness and education events List not Exhaustive QUALIFICATIONSA Diploma / Degree in IT would be a distinct advantage. Professional certification, such as a CISSP, CISM, CISA or other information security credentials would be an advantage. ISO 27001, ISO 27002 and ISO 27005 is mandatory. ITIL Foundations Certified EXPERIENCEAt least 10 – 15 years of varied information technology experience is required, applicable experience includes, but is not limited to, computer, server and networking infrastructure, operating systems, application software development, project management, regulatory compliance, risk management, and providing training. Two years of direct experience in managed information systems duties. Previous involvement in the management of IT projects would be a distinct advantage. KEY SKILLS & PERSONAL ATTRIBUTESManagerial / Leadership ability. Supervisory skills to balance workloads, priority, but also boost productivity and efficiency. Team player with a high degree of initiative, dependability and ability to work with little supervision. Inherently demonstrate a high level of integrity and trustworthiness given the level of confidential information available to the person at all times. Adaptable and flexible to changes and various situations and scenarios. The ability to maintain confidentiality in regard to information processed, stored, or accessed by the systems. The ability to manage multiple concurrent projects and to reason analytically. The ability to work with and train people possessing differing levels of technical knowledge. Effective verbal and written communication skills; interpersonal and collaborative skills and proficiency in writing technical specifications to support a diverse group of stakeholders. Strong interpersonal skills and ability to build and maintain relationships. Develop knowledge of, respect for, and skills to engage with those of other cultures or backgrounds. Ability to handle various tasks at any given point in time. DELIVERABLESIT Security Management: KPIs / Dashboard. Frequency = MONTHLYMeetings with LISO Security Team = DAILY/WEEKLYMeetings with CISO and Regional IT/IS Manager. Frequency/MONTHLYMeetings with Regional MIS Managers. Frequency /MONTHLYMeetings with Regional Management. Frequency /MONTHLYWeekly meeting with HQ Security Team. Frequency /WEEKLYSecurity Action Plan update. Frequency /MONTHLY.

---

**

[Click the Apply button below to apply, and Create my CV to build a CV tailored to this offer, professionally]