Job Description

General information

Local Information Security Officer M/F General informations Africa Global Logistics Rwanda Limited, a company duly incorporated under the laws of Rwanda and its offices at Kigali Special Economic Zone, P.O.Box 1338, Kigali, Rwanda is specialised in transport and logistics Job description Job Title INFORMATION SYSTEMS MANAGEMENT

Local Information Security Officer M/F Contract Type PERMANENT Job Location East Africa, Rwanda, KIGALI Working Hours Full time Mission Description The LISO is responsible for ensuring appropriate controls are in place for the security of information systems. The LISO safeguards information by seeing that security risks are identified, assessed and accurately reported. Additionally, the LISO is charged with ensuring local procedures and activities comply with all regulatory requirements and internal security policies, procedures, guidelines and standards.

KEY DUTIES & RESPONSIBILITIES

 Apply and distribute the Central Information System Security Policy, Adapt the ISSP to the concerned perimeter, if necessary, disseminate the elements of ISSP within the entity, control the correct application of the ISSP on the perimeter.

 Apply central information security strategies, both short-term and long-range, in application of the Bollore group.

 Thoroughly conduct and complete annual reviews and audits as required by engaging both internal business partners across the region and external parties.

 Management of LISO security team to oversee ongoing activities in cyber security within the region.

 Directs an ongoing, proactive risk assessment program for all new and existing systems and remains familiar with the current goals and business processes of the Bollore group so effective controls can be put in place for those areas presenting the greatest information security risk in the Eastern Africa region.

 Communicates risks and recommendations to mitigate risks to senior management so decisions can be made to ensure the security of information systems.

 Oversees ongoing activities related to the development, implementation, and maintenance of the information security policies and procedures by ensuring these policies and procedures encompass the overall security of information security at rest or in motion within the groups systems and assisting in compliance of departments local processes and procedures, ensuring they are not in conflict with company policies.

 Apply and assist in implementing BCP (Business Continuity Plan) and DRP (Disaster Recovery Plan) procedures within the region.

 Acts proactively to prevent potential security incidents by ensuring that proper protections are in place, such as intrusion detection and prevention systems, firewalls, and effective physical safeguards, and provides for the availability of computer resources by ensuring a business continuity/disaster recovery plan is in place to offset the effects caused by intentional and unintentional acts.

 Ensure that local regulatory and contractual provisions on personal data protection are done and met throughout the region.

 Accompany countries within the region, in the application of the ISSP.

 Provide visibility KPI's on incidents and security indicators on the Eastern Africa perimeter.

 Develops information security awareness training and education programs, but also participates in local, regional, and worldwide awareness and education events

List not Exhaustive Profile QUALIFICATIONS

A Diploma / Degree in IT would be a distinct advantage.

Professional certification, such as a CISSP, CISM, CISA or other information security credentials would be an advantage.

ISO27001, ISO27002 and ISO27005 is mandatory.

ITIL Foundations Certified

EXPERIENCE

At least 10 - 15 years of varied information technology experience is required, applicable experience includes, but is not limited to, computer, server and networking infrastructure, operating systems, application software development, project management, regulatory compliance, risk management, and providing training. Two years of direct experience in managed information systems duties.

Previous involvement in the management of IT projects would be a distinct advantage.

KEY SKILLS & PERSONAL ATTRIBUTES

Managerial / Leadership ability.

Supervisory skills to balance workloads, priority, but also boost productivity and efficiency.

Team player with a high degree of initiative, dependability and ability to work with little supervision.

Inherently demonstrate a high level of integrity and trustworthiness given the level of confidential information available to the person at all times.

Adaptable and flexible to changes and various situations and scenarios.

Ability to conceptualise IT networks and systems and identify potential risks in both the hardware and software environment.

The ability to maintain confidentiality in regard to information processed, stored, or accessed by the systems.

The ability to manage multiple concurrent projects and to reason analytically.

The ability to work with and train people possessing differing levels of technical knowledge.

Effective verbal and written communication skills; interpersonal and collaborative skills and proficiency in writing technical specifications to support a diverse group of stakeholders.

Strong interpersonal skills and ability to build and maintain relationships.

Develop knowledge of, respect for, and skills to engage with those of other cultures or backgrounds.

Ability to handle various tasks at any given point in time.

DELIVERABLES

IT Security Management:

KPIs / Dashboard. Frequency = MONTHLY

Meetings with LISO Security Team = DAILY/WEEKLY

Meetings with CISO and Regional IT/IS Manager. Frequency/MONTHLY

Meetings with Regional MIS Managers. Frequency /MONTHLY

Meetings with Regional Management. Frequency /MONTHLY

Weekly meeting with HQ Security Team. Frequency /WEEKLY

Security Action Plan update. Frequency /MONTHLY