Associate Director, IT Security Operations at IHS Towers

Job Description

Geographical Scope:

• Deliver IT services across Nigeria, Group entities, SSA, and MENA regions.
• Provide leadership and direction for the IT security team in all IHS entities in line with best practice like ISO27001

Functional Management:

• Security architecture: Planning, buying, and rolling out security hardware and software, and making sure IT and network infrastructure is designed with best security practices in mind
• Security operations: Real-time analysis of immediate threats, and triage when something goes wrong
• Cyber-risk and cyber intelligence: Keeping abreast of developing security threats, and helping the board understand potential security problems that might arise from acquisitions or other big business moves
• Data loss and fraud prevention: Making sure internal staff doesn't misuse or steal data
• Identity and access management: Ensuring that only authorized people have access to restricted data and systems
• Program management: Keeping ahead of security needs by implementing programs or projects that mitigate risks — regular system patches, for instance
• Investigations and forensics: Determining what went wrong in a breach, dealing with those responsible if they're internal, and planning to avoid repeats of the same crisis
• Governance: Making sure all the above initiatives run smoothly and get the funding they need — and that corporate leadership understands their importance.

Strategic Planning & Execution:

• Yearly assess “AS IS” situation, define and update the “Future State Blueprint” and related Technology roadmap of enhancements and projects, following technology trends.
• Identify potential threats to the confidentiality, integrity, and availability of the company’s systems and network.
• Identify and architect appropriate security technologies based on risks, policies and architecture.
• Support IT Architecture Review process and evaluate associated security of the proposed architectures.
• Lead efforts to establishing credible security awareness throughout IHS Nigeria
• Create and establish processes around vulnerability management
• Keep up with industry trends in cyber security
• Provide leadership and direction and establish baselines in ensuring IT security is part of the procurement process for all applications
• Drive purchase of security solutions, with Procurement to combat IT security risk
• Perform other functions as assigned by the IT Director or the CIO.

Qualifications

• Bachelor’s and/or Advanced degree in Computer Science or any related disciplines.
• Professional certification: CISA, ISO27001, CISSP, CISM, CEH
• Minimum 9 years’ relevant experience in Information Security, IT Control and IT Risk.
• Hands-on experience in security systems review, Acunetix, windows server, linux server, SIEM, Nipper, Nessus
• Demonstrable experience with change management, user access management, segregation of duties matrix, incident response.
• Thorough understanding of the latest security principles, techniques, and protocols.
• Bilingual is a plus; English, French
• Willing to travel
• Experienced enough to potentially act as Deputy Global IT Director. This means that knowledge of Infrastructure, Network, Service-Desk and On-site support is a plus.