Information Security Officer

About the role

The Information Security Officer will be responsible for maintaining the Group's security systems and ensuring they align with the Information Security Policy. The role includes monitoring network traffic for potential vulnerabilities or threats and implementing controls to prevent exploitation.

Key responsibilities

• Monitor software that analyses network traffic for vulnerabilities and threats to protect data confidentiality, integrity and availability.
• Review logs from firewalls, intrusion detection systems, network sensors and virus alerts to detect anomalies.
• Investigate and resolve security incidents reported by external security providers.
• Act on virus alerts and suspicious traffic from external service providers and network sensors.
• Update firewall rules to block malicious websites and prevent introduction of harmful code.
• Participate as a technical resource on projects to avoid introducing security vulnerabilities and ensure policy compliance.
• Review server compliance and ensure security patches are applied according to best practices.
• Perform network vulnerability scans and PCI scans on servers, advising management on compliance.
• Review change and enhancement requests for ICT systems to ensure ISO‑based security standards.
• Provide updates on ICT projects, management action plans and security governance to senior leadership.
• Supervise staff, conduct training, performance appraisals and team meetings.

Required profile

• First degree in Computer Science, Information Systems or related field, or an Associate’s Degree in Information Technology.
• Relevant security certification (e.g., Certified Information Security professional).

Required skills

• Network traffic monitoring and analysis.
• Firewall configuration and management.
• Intrusion detection and prevention systems.
• Vulnerability scanning and remediation.
• PCI compliance scanning.
• ISO standards compliance (ISO 27001, etc.).
• Security incident investigation and response.