Information Risk Senior Officer at Safaricom Kenya

Reporting to the Senior Manager – Information Risk and Compliance the position holder will be responsible for executing and maintaining a comprehensive programme to assess information risks that Safaricom faces, monitor systems for threats and vulnerabilities, as well as research, recommend and implement appropriate mitigations.

Responsibilities for the Information Risk Senior Officer Job

• Conduct periodic monitoring of access to information systems at agreed intervals
• Carry out periodic assessments of cyber threats for critical assets and services
• Review back-up policies and implementation across critical systems, including back-up and restore frequencies as well as restore testing, and provide recommendations for improvements as part of our cyber response strategy.
• Review and ensure adequate policies are implemented to manage Information risk across the company
• Review patch and vulnerability management weekly and monthly reports and provide input and recommendations for improvement
• Conduct independent vulnerability assessments across critical assets and liaise with system custodians for closure
• Conduct periodic review of information security logs for information systems at agreed intervals
• Conduct adequate technical risk review of operating systems, databases and applications across information systems
• Review and ensure adequate policies are implemented to manage cyber risk across the company and create awareness across the organization
• Conduct enterprise information risk assessments at agreed regular intervals to assess and track the health of information management across the organization
• Conduct risk assessments at agreed intervals across information processing sites
• Perform ad-hoc risk assessments as required by supervisor.

Requirements for the Information Risk Senior Officer Job

• Degree in IT, Business Information Systems (or related technical field) from a recognized university
• Holder of at least one of the following certifications: CISA, CISM or CISSP
• At least 2 years proven working experience in administration of Information Systems or in an technical systems audit role
• Detailed knowledge of GSM and IT Networks is essential.