Job Description
- Application Deadline: Sat, 19 Feb 2022 00:00:00 GMT
- Position: Information Security Officer
- Job Type Full Time
- Qualification BA/BSc/HND
- Experience 5 years
- Location Lagos
- Job Field ICT / Computer 
Department: Corporate Services & Development
Job Type: Permanent
Responsibilities
- The Information Security Officer will ensure that MainOne Information Security Management systems are up to date and fully operational, thus maintaining and enhancing customer trust.
- The job holder will participate actively in security audits, risk analysis, vulnerability testing and security reviews in MainOne with a particular focus on the MDXi.
Other responsibilities include:
- Track the ISMS Calendar- to ensure all activities are up to date with requisite evidence as detailed by the ISMS Manager.
- Manage the requirements of all information security certification programs and Compliance efforts (e.g., PCI-DSS certification, ISO27001:2013 standard, SOC 2 Audit Assessment, and Data Protection requirements.)
- Ensure the effective review of all Information security alerts and notifications in line with IS Policy.
- Support the delivery of internal Information Security training and general Information security awareness.
- Manage the information security (IS) incident handling and response procedure as may be assigned by the ISMS Manager or Security specialists.
- Manage the Vulnerability Assessment (VAPT) program and Penetration Testing programs for MainOne entities.
- Provide backup support to the IP security specialists in tier 2 and tier 3 security operations to secure the MainOne network by enforcing policies, defining and monitoring access.
Qualifications, Skills & Competencies
- Strong written and verbal skills.
- At least 5 years experience in managing information security programs and 1 year of technical experience in information systems, networks, and/or application security.
- Certification in CCNA, CISSP, CISA, CEH, PECB ISO 27001:2013 Lead Implementer will be an added advantage.
- Strong understanding of a process-driven environment.
- Good understanding of the requirements of ISO 27001 standard, PCI DSS Certification, and SOC 2 audit Criteria.
- Strong analytical, problem-solving, and critical thinking skills in analyzing incidents in the cyber security landscape.
- Candidates working with: Cisco Routers & Switches, operating systems, (e.g. Windows and/or Linux), HR Approved Copy Network Administration, and TCP/IP will have an advantage
- Experience working with: Systems security, Network security, Firewalls, IDS / IPS, vulnerability assessments, incident response.
- General Knowledge of network routing and security protocols and implementations: TCP/IP, SSL, IPSEC VPN, SSL VPN, and VLANs are required.
Demands of the Job
- Availability to work extra hours in times of emergency and specialized project deliverables.
- Ability to understand and manage the pressure of 24x7 security surveillance in a fast-driven environment.
- Ability to work both independently and as part of a team to diagnose, troubleshoot, and resolve Information security incidents, problems and issues.