Chief Information Security Officer (CISO) - Reputable Financial Institution

A Multinational Financial Institution seeks the services of a Chief Information Security Officer (CISO) for their Head Office in Accra.

General Description:

The Chief Information Security Officer is responsible for driving all cybersecurity initiatives in the institution.

RESPONSIBILITIES

• Responsible for advising the Senior Management and Board of Directors on Cyber and Information Security Management.
• Responsible for formulating an institutional methodology for managing cyber and information security risks.
• Responsible for developing the institution’s Cyber and Information Security policy and submit it to the Senior Management and Board for approval.
• Responsible for developing and updating specific and general work procedures for realizing the Company’s cyber and information security policy.
• Responsible for maintaining an ongoing process of cyber and information security risk assessment with the relevant institutional units, in order to analyze and assess:

1. 1. the risk levels integral to the institution's technological and business activities: o the controls required to ensure systems integrity.
   2. the level of residual risk and exposure to cyber and information o security threats the institution is willing to accept in implementing these activities.

• Responsible for integrating and coordinating all institutional cyber and information security efforts, including oversight and control of all institutional units participating in these efforts.
• Responsible for creating a framework for receiving ongoing and ad-hoc reports from various institutional units.
• Responsible for initiating and conducting cyber and information security readiness exercises as follows:

1. 1. at least quarterly, an exercise shall be staged to assess the ability of one or more institutional entities to deal with a cyber-attack; and
   2. once a year, an exercise shall be undertaken to assess the preparedness of the entire institution to withstand cyber-attacks.

• Responsible for coordinating cyber and information security activities, including joint exercises with business partners and service providers.
• Responsible for promoting cyber and information security awareness and train employees, suppliers, business partners and customers.
• Responsible for continuously learning and monitoring cyber and information security issues by identifying trends, methods and advanced developments in the field while gathering information about emerging attack techniques and ways of dealing with them.
• Responsible for forming a Cyber-Incident Response Team.
• Responsible for analyzing cyber and information security incidents that have occurred in Ghana and worldwide, and assess their potential impact on the institution, as well as implement the relevant measures proposed.
• Responsible for developing metrics and indicators to assess the effectiveness of cyber and information security systems and procedures.
• Responsible for assessing regular and ad-hoc institutional cyber and information security controls.
• Responsible for drawing up annual and multiannual work plans, including budgeting, prioritization, and timetables for implementing the assessment processes.
• Responsible for preparing and submitting annual reports to the Senior Management and Board, detailing the institutional cyber and information security defense level, weaknesses and vulnerabilities, available countermeasures, and the activities and budgets required to enhance its defences.
• Responsible for collaborating with relevant institutions involved in cyber and information security issues.
• Responsible for ensuring the preparation of reports on major cyber and information security incidents to the Bank of Ghana.

Required Skills or Experience

EDUCATIONAL REQUIREMENTS

• Bachelor's degree in Computer Science or Cybersecurity-Required
• Master's degree (MBA or MSc Cybersecurity)-Added advantage
• CISSP and CISM certifications.
• 5+ years of cybersecurity experience.
• 2+ years leading security teams and programs.

TECHNICAL

• Excellent knowledge of Cybersecurity Strategy & Architecture
• Risk Management ability
• Excellent knowledge in Information Security Governance
• Excellent Security Operations (SOC)
• Incident Response & Crisis Management Ability
• Excellent understanding of Network Security
• Good understanding of Cloud Security
• Vulnerability Management Ability-re
• Threat Intelligence
• Knowledge of Security Compliance & Regulatory Requirements
• Business Continuity & Disaster Recovery Ability
• Application Security
• Security Metrics & Reporting ability
• Excellent oral, written and presentation skills.
• Hard-working and driven.
• Excellent communication skills.

PERSONALITY

• Positive attitude.
• Excellent management skills.
• Accurate and fast worker.
• Good interpersonal skills.
• Neat and organised person.
• Aptitude in decision-making and problem-solving.
• Change Management
• Stakeholder Management
• Innovation and Continuous Improvement
• Crisis Management

🔥 SIMILAR JOBS YOU MAY LIKE → APPLY