Senior Officer – Information Risk at Safaricom Kenya

Brief Description

Reporting to the Principal Officer – Information Risk, the position is responsible for assuring oversight on Information Risk by implementing a comprehensive programme to assess and mitigate current and emerging risks that impact the integrity, availability, accountability and confidentiality of information assets and the information environment in accordance with compliance and regulatory requirements. The position will be within the ERM C.O.E while supporting various squads in information risk assurance.

Key Responsibilities

• Development d review and review of Information and cyber security policies, standards, Guidelines and procedures across the company and the monitoring thereof.
• Review and ensure adequate policies are implemented to manage information risk across the company.
• Offer specialist guidance & advisory to the agile teams and other business units for timely assurance of key/special projects.
• Provide guidance in the interpretations of current policies related to specific situations as they arise.
• Create awareness on the policies in place across the company.
• Conduct policy exception reviews
• Coordinate/facilitate enterprise information risk assessments at regular intervals to assess and track the health of information management across the company bi-annually.
• Follow up and ensure agree upon action points are implemented effectively and on time.
• Perform ad-hoc risk assessments as per managements request
• Offer guidance on security risks on emerging threats and advise the business accordingly
• Develop and embed appropriate information risk awareness initiatives across the business
• Extend the security awareness culture to the customers and other critical stakeholders.
• Offer guidance on the planning, implementation, monitoring and review of ISMS.
• Provide and support the custodians of information security monitoring tools in defining

QUALIFICATIONS

• Degree in IT, Business Information Systems (or related technical field) from a recognized university
• Experience working with agile methodologies, such as scrub and Kanban
• Holder of at least on of the following certifications: CISA, CISM or CISSP
• At least 5 years proven working experience in operational management of Information Systems / Information Security / Information Systems Audit role, or proven experience in business process assurance and/or risk analysis preferably in a telecommunications environment
• Detailed knowledge of GSM and IT Networks is essential

Closing: 04 August 2022