Senior Information Officer Job Pretoria South Africa,IT/Tech

About CWS

Position Title: Senior Information Security Officer

Reports To: Information Security Coordinator

Supervises: None

Division: CWS Africa

Department: Administration, Information Technology

Team: South Africa

Job Location: Pretoria, South Africa

Grade Level: 7, National

Introduction :

Church World Service (CWS) is a not-for-profit, faith-based organization transforming communities around the globe through just and sustainable solutions to hunger, poverty, displacement and disaster. CWS does not discriminate based on race, color, religion, sex, national origin, gender identity, genetic information, age, disability, or veteran status in employment or in the provision of services.

Primary Purpose

Primary Purpose :

This position is primarily responsible for the development, adoption, implementation, and enforcement of information security policies, procedures, and standards; ensuring compliance with the organizational IT security framework; regular monitoring and network vulnerability scanning; internal IT security audit; cyber risk mitigation and internal cyber staff cyber security best practices training. The position requires flexibility, initiative, and confidence in dealing with different types of complex systems, networks, software, equipment, and more importantly, different types of people.

Key Relationships

Internal to CWS

Country Representative

Finance & Administration Manager

IT Supervisor

Nairobi Information Security Coordinator

Nairobi SISOs

External

Information Security service providers

POPI Act service providers

Office internet service provider

Working Environment

Officeand/work from home environment.

Periodic travel to the field as may be required.

Occasional holiday and weekend coverage.

Short notice response to emergencies, including after hours, on weekends and holidays.

Responsibilities

Core Job Responsibilities

Administration (40%)

Leads vendor risk management responds to outside vendor requests for information regarding policies, standards, questionnaires, and baselines, and provides status reporting and metrics.

Creates and maintains all systems security documentation.

Creates and maintains standard operating procedures and manuals.

Leads cyber incident response and collaborates with the organization to improve processes.

Resolves all IT security-related requests escalated from the helpdesk.

Performs other duties assigned by the IS Coordinator or IT Management and Governance when necessary.

Compliance (35%)

Ensures that all CWS Africa ICT systems, data, and networks are secured according to the organizational defined policies, Integrity and Compliance Manual, PRM NOFO IT security requirements, and the National Institute of Standards Technology (NIST) moderate controls.

Ensures consistent implementation of the NIST security framework and enforces related security policies and procedures.

Coordinates with the Training Unit to develop and implement all security training, awareness, and progress programs to educate the organization’s employees regarding information security requirements and initiatives.

Achieves and maintains a thorough knowledge and adherence to established RSC Africa, CWS/IRP, DOS/PRM and USCIS policies and procedures regarding the Information System for CWS/RSC Africa

Conducts Annual internal IT security Audit/Assessment against the NIST security framework; including a risk assessment and budget estimation for risk mitigation and treatment; and ensuring compliance with all the regulatory controls.

Leadership & Management (20%)

Provides input and recommendations to IT management on systems security updates and trends.

Advises the CWS Africa leadership on key IT security areas including risk management, legal and regulatory compliance, and policy in all countries of operation; and oversees ongoing risk identification, remediation, compliance, and vendor risk.

Serves as an SME (Subject Matter Expert) and provides information security mentoring and training to CWS Africa IT and other staff as appropriate.

Collaborates with all IT Staff in systems configuration management, changes, updates, and daily monitoring and reporting as required by IT management;
Provides IT security-related assistance and…


Increase/decrease your Search Radius (miles)



Job Posting Language