The Manager Information Security will be responsible for ensuring information and data security standards are implemented within INFRATEL for both internal and external customers. The Manager shall oversee INFRATEL’s security program. The Manager shall ensure complete adherence to data security principles and standards both for the data center as well as for clients. The Manager will ensure security compliance of all application to regulatory and international best practices. The Officer will ensure that all third-party applications and devices comply with the adopted security standards. The Manager shall ensure the acquisition and maintenance of relevant certifications for the business.

Key Responsibilities

Vulnerability Assessment   

• Manage regular cybersecurity vulnerability assessments of applications, web sites and infrastructure components
• Oversee Implementation of Security on all systems

Security Policy and Procedures    

• Develop and maintain a formal cyber threat intelligence program through the collection, correlation and analysis of logevents/information
• Develop, review, implement and maintain the ICT SecurityStrategy, Policy and Processes
• Maintain Data Centre Physical Security
• Monitor Video Footage compliance for all Data Centers
• Develop Risk Assessment and Implement Penetration test     
• Conduct IT Risk Assessments and Compliance
• Implement periodical penetration tests for systems

Business Continuity 

• Establish, implement and maintain an ICT business continuitymanagement methodology

Software Quality Assurance

• Liaise with developers to ensure security is embedded in alldeveloped solutions
• Security Awareness 
• Conduct regular employee security awareness programes
• Implement security initiatives

Information security management framework    

• Knowledge of common information security managementframeworks, such as ISO 27001, COBIT, Uptime Institute, PCI DSS
• Maintain all processes for which INFRATEL Corporation iscertified for
• Responds to cybersecurity incidents

Reporting     

• Provide periodical reports for all operations

Management Updates      

• Provide and advise management on information securitymatters

Minimum Qualifications

•  Two Professional certification from PCIDSS/CISSP/CISP/CISA/CEH or any cybersecurity certification
• Professional Certification in ISO27001 Lead Implementer/Auditor is a must
• Member of ICTAZ

Key Competencies and Skills

• Good knowledge of networksecurity
• Good knowledge of Applicationsecurity
• Good knowledge of vulnerabilitymanagement
• Good knowledge of threatmanagement
• Good knowledge of cybersecurityintelligence and analysis
• Extensive technical knowledge in Cyber Security management and quality assurance
• Knowledge of Linux and Windows Systems
• leadership skills for management and development of staff
• Ability to collaborate and work with a team
• Strong oral and written communication skills.
• Strong background in various aspects of software development
• Good customer support skills
• Project Management
• Logical thinking and problem-solving
• Highly proven ethical conduct and free from criminal record; and
• Highly computer literate and presentation skills.

Years of Experience Required

• Minimum of five (5) years of Information Technology experience with a focus on Cybersecurity
• Experiencein executing certifications and audits such as ISO27001, PCIDSS, SOC1, SOC2