Information Security Officer
Summary
Information Security Officer at Equicom Savings Bank who builds and runs the bank's Information Security Management Program: risk assessments, security policies aligned to ISO 27001/NIST/COBIT, compliance and audits, incident response, vulnerability scanning, and staff security-awareness training.
Information Security Officer
Job Descriptions:
Responsible for protecting an organization’s information assets, systems, and infrastructure from cyber threats, data breaches, and regulatory violations.
Develop, implement, and maintain the organization’s Information Security Management Program (ISMP)
Establish security policies, standards, and procedures
Ensure alignment with frameworks like ISO 27001, NIST, and COBIT
Define data classification and protection standards
Conduct regular risk assessments and threat analysis
Identify vulnerabilities in systems, networks, and applications
Recommend risk mitigation strategies
Maintain and update the organization’s risk register
Ensure compliance with applicable laws and regulations (e.g., data privacy laws, financial regulations)
Coordinate internal and external security audits
Address audit findings and implement corrective actions
Maintain documentation for compliance reporting
Develop and maintain an incident response plan
Investigate security breaches and cyber incidents
Coordinate containment, eradication, and recovery efforts
Conduct post-incident reviews and reporting
Endpoint protection solutions
Monitor suspicious activities and respond to alerts
Conduct vulnerability scans and penetration tests
Conduct employee cybersecurity awareness programs
Train staff on phishing prevention and secure practices
Promote a culture of security within the organization
Educational Background:
Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Information Systems
5–10+ years of experience in: Information security, IT risk management, Cybersecurity operations
Prior experience in a regulated environment (banking, financial services, healthcare) is highly preferred
Experience in: Risk assessments, Security governance. Incident response, Vulnerability management
Strong communication and reporting skills
Ability to present to executives and board members
Decision-making under pressure
Team leadership and cross-functional collaboration
Experience with core banking systems
Fraud prevention knowledge
Business continuity & disaster recovery planning
Third-party/vendor risk management