Assistant Director - Digital Transformation & Information Systems at Financial Reporting Centre (FRC)

Education:

• Academic - Bachelor’s degree in Computer Science (Bachelor’s degree in Computer Science)
• Academic - Master’s degree in Software Engineering (Master’s degree in Software Engineering)
• Academic - Master’s degree in Information Technology (Master’s degree in Information Technology)
• Academic - or equivalent qualification, from a recognized institution (or equivalent qualification, from a recognized institution)
• Academic - Master’s degree in Computer Science (Master’s degree in Computer Science)
• Academic - Master’s degree in Software Engineering (Master’s degree in Software Engineering)
• Academic - Master’s degree in Information Technology (Master’s degree in Information Technology)
• Academic - or equivalent qualification, from a recognized institution (or equivalent qualification, from a recognized institution)
• Academic - OTHER ( Shown merit and ability as demonstrated in work performance)
• Professional - Professional certification in CCNP (Professional certification in CCNP)
• Professional - Professional certification in CCNA (Professional certification in CCNA)
• Professional - Professional certification in MCSE, (Professional certification in MCSE,)
• Professional - Professional certification in MCSA (Professional certification in MCSA)
• Professional - Professional certification in MCSD (Professional certification in MCSD)
• Professional - Professional certification in N+ (Professional certification in N+)
• Professional - Professional certification in A+ OCA (Professional certification in A+ OCA)
• Professional - Professional certification in CEH (Professional certification in CEH)
• Professional - Professional certification in CISSP (Professional certification in CISSP)
• Professional - Professional certification in CISM (Professional certification in CISM)
• Professional - Professional certification in CDPSE (Professional certification in CDPSE)
• Professional - Professional certification in CEH (Professional certification in CEH)
• Professional - Professional certification in Linux+ (Professional certification in Linux+)
• Professional - Professional certification in Network+ (Professional certification in Network+)
• Professional - Microsoft Certified IT Professional (MCITP) (Microsoft Certified IT Professional (MCITP))
• Professional - relevant programming languages (relevant programming languages)
• Professional - software development methodologies or equivalent professional certification, from a recognized institution (software development methodologies or equivalent professional certification, from a recognized institution)
• Membership - Membership to a relevant professional body, and in good standing (Membership to a relevant professional body, and in good standing)

Job Responsibilities

• Lead the development of the ICT Security policy, framework, strategy and procedures for the Centre in line with Government policy and best practice
• Guide implementation of the information security strategy and roadmap for the Centre
• Coordinate the development and implementation of an effective information security awareness program for all staff of the Centre
• Lead in the development of a robust IT Security Business Continuity Management program, ensuring effective processes are set up and executed
• Provide continuous assurance of information systems around confidentiality, integrity, and availability
• Ensure vulnerability assessments & penetration testing is conducted and patching/remediation of vulnerabilities are done as per policy
• Drive the implementation, administration, and support of technology control systems as per the IS roadmap
• Oversee the continuous monitoring of technology assets for cyber incidents
• Ensure security incident response for effective response, containment, and recovery from security incidents or breaches
• Participate as a key stakeholder in the Centre’s Change Management governance process
• Participate and contribute towards developing and supporting IT practices
• Liaise with internal and external stakeholders to ensure the Centre achieves information security objectives
• Spearhead periodic audits, assessments, and reviews to ensure robust ICT security across the Centre’s infrastructure and systems
• Implement mentorship program for departmental staff
• Conduct performance review for direct reports to ensure effective delivery of departmental objectives
• Facilitate identification and mitigation of the department’s risks
• Review ICT network and data centres management reports and ensuring timely submission