Job description

As a Senior Information Security Officer within the Internal Audit Department, you will be responsible for ensuring the robustness and effectiveness of information security controls and practices within the organization. Your role will involve conducting comprehensive audits, risk assessments, and evaluations of the MCF information security infrastructure, policies, and procedures. You will work closely with various departments to identify vulnerabilities, recommend improvements, and implement best practices to safeguard sensitive data and mitigate cybersecurity risks.

Accountabilities and Key Roles

1. Conduct Information Security Audits: - Plan, execute, and lead information security audits to assess the effectiveness of controls and compliance with regulatory requirements and industry standards. - Review IT systems, networks, and applications to identify vulnerabilities, weaknesses, and areas of improvement. - Evaluate the implementation of security policies, procedures, and guidelines across the organization. 2. Risk Assessment and Analysis: - Perform risk assessments to identify potential threats, vulnerabilities, and risks to the organization information assets. - Analyze audit findings and security incidents to determine root causes and potential impacts on the organization operations and reputation. - Develop risk mitigation strategies and recommendations to address identified risks and enhance information security posture. 3. Compliance and Regulatory Oversight: - Ensure adherence to relevant regulatory requirements, standards, and guidelines related to information security, such as GDPR, PCI DSS, ISO 27001, etc. - Stay updated on emerging threats, vulnerabilities, and regulatory changes affecting the organization. - Collaborate with the audit team to address audit findings and implement corrective actions. 4. Engagement and Communication: - Communicate audit findings, recommendations, and risk assessments to the audit manager, audit committees. - Collaborate with IT teams, and other departments to implement remediation plans and enhance information security controls. - Provide guidance, training, and support to staff members on information security best practices and awareness. 5. Continuous Improvement and Monitoring: - Participate in the development and enhancement of information security policies, procedures, and standards.

Job Requirements

- Strong understanding of information security principles, practices, technologies, and frameworks. - Proficiency in conducting information security audits, risk assessments, and compliance reviews. - Excellent analytical, problem-solving, and decision-making skills. - Effective communication and interpersonal skills, with the ability to interact with all levels of the organization. - Candidates with knowledge in Oracle and banking systems

Competencies

Bachelor's degree in computer science, Information Security, or related field

Experiences

2-5 experience in information security, internal IT security audit, or related roles.