Chief Information Security Officer (CISO) at VFD Group

Job Description

The Chief Information Security Officer is responsible for establishing and maintaining the enterprise vision, strategy, and program to ensure information assets and technologies are adequately protected. The primary role is to ensure that data, in any format, is protected from threats that could compromise its confidentiality, integrity, or availability.

• Develop and implement an information security strategy aligned with the VFD Group's overall business objectives.
• Establish and enforce information security policies, standards, and procedures across the organization.
• Conduct regular risk assessments and vulnerability scans to identify and mitigate potential security threats.
• Lead incident response efforts to ensure timely detection, containment, and resolution of security incidents.
• Oversee the design and implementation of security controls and technologies, including firewalls, intrusion detection systems,and encryption mechanisms.
• Stay up to date with the latest security trends, threats, and vulnerabilities and provide guidance to management on potential risks.
• Collaborate with cross-functional teams to integrate security requirements into the development and deployment of new systems and applications.
• Conduct security awareness training and education programs to promote a security-conscious culture within the organization.
• Manage relationships with external vendors and partners to ensure compliance with security standards and contractual obligations.
• Monitor and analyze security incidents and develop reports for senior management and regulatory authorities as required.
• Establish and maintain effective communication channels with internal stakeholders, including executive management and the board of directors, to provide updates on the status of the information security program.
• Conform with the technical and organizational measures implemented by the VFD Group to ensure the security and confidentiality of personal data to prevent unauthorized or unlawful access, use, disclosure, alteration, or destruction.
• Carry out the role of the Data Protection Officer in responding to data subjects’ or regulators’ requests, and provide any information or documentation required for data protection compliance.
• Report any actual or suspected data breach to the Data Protection Officer immediately

Requirements

• Bachelor's or Master's degree in computer science, information security, or a related field.
• A Master’s degree in a relevant discipline is a strong advantage.
• Professional certifications such as:Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM) or equivalent
• Certified Information Security Manager (CISM)
• Certified Chief Information Security Officer (CCISO)
• 9 - 12 years of proven experience in computing and information security, including experience in Fintech, Banking or Mobile Money is preferred
• Manager track record of 3 years or more; with at least 3 years in relevant sector/industry
• Strong understanding of emerging technologies, cloud computing, and mobile security.
• Experience in developing and implementing information security strategies and programs.
• Familiarity with risk management methodologies and techniques.
• Excellent leadership and management skills, with the ability to inspire and motivate cross-functional teams.
• Exceptional communication and presentation skills, with the ability to convey complex security concepts to both technical and non-technical stakeholders.
• Demonstrated ability to work in a fast-paced and dynamic environment, balancing multiple priorities and deadlines.

CORE COMPETENCIES

• Strong leadership and team management abilities.

• IT Security Administration.

• IT Security Architecture.

• Information Systems Security Certification.

• Demonstrate skills in influencing and driving informationsecurity initiatives