• Company: Zambia National Commercial Bank
• Location: Lusaka, Lusaka Province, Zambia
• State: Lusaka
• Job type: Full-Time
• Job category: Banking Jobs in Zambia

Zambia National Commercial Bank Plc (Zanaco) is inviting applications from suitably qualified and experienced individuals for the following job aimed at contributing to the Bank’s strategic vision, in the Risk Division under the Integrated Risk Management Department to be based at Head Office: –

 

INFORMATION SECURITY RISK SPECIALIST (X1)

 

JOB PURPOSE

To ensure the preservation of availability, integrity, and confidentiality of the Bank’s Information systems to ensure maximum business value at minimal information security risk.

 

Under the supervision of the Information Security Risk Head, the following are among the

Key Job Responsibilities: –

• Conduct testing of Web and Applications security controls, Network security controls, Database security controls, Operating Systems security controls, Data Privacy controls and Data Loss Prevention controls in line with the Vulnerability Management Program and the Information Security Management Systems (ISMS).
• Engage the IT Security Operations team on all Information Security Risks as a result of internal and external penetration assessments as well as vulnerability assessments and coordinate mitigation of identified risks.
• Investigate cyberattacks, intrusion incidents, conduct forensic investigations and monitor incident responses in line with Vulnerability Management Program and the Information Security Management Systems (ISMS).
• Design controls to ensure implementation of adequate data privacy controls and policies; data loss prevention controls and policies; and access management controls and policies of all information systems owned by the Bank in line with business needs and AIC classification.
• Engage the IT Security Operations team to ensure data privacy controls, data loss prevention controls and access management controls are operating effectively in line with business needs and AIC classification.
• Benchmark and evaluate current information security technologies against industry practices to enhance information security capabilities of the Bank.
• Develop and implement information security awareness programs targeted at both Zanaco users and external customers.
• Develop and implement the policies and procedures and controls for PKI and Digital Signatures in line with Business needs.
• Ensure that the Bank attains and maintain the PCI DSS and ISO 27000 certifications.
• To perform analysis of logs to ensure that risks are timely identified and response plans implemented.
• Contribute to the Governance Risk and Compliance Committee (GRC).
• Perform any other duties and tasks as may be assigned by management. 

INTERNAL/EXTERNAL CONTACT

• External: ZICTA, BAZ, security vendors and other regulatory bodies

• Internal: All Divisions

 

QUALIFICATIONS AND EXPERIENCE

• Grade 12 certificate with a minimum of 5 credits, of which English and Mathematics are mandatory.
• University Degree in Engineering, Electronics, Telecommunications Engineering or Computer Science.
• Certifications: CISM, CRISC, CISA, CEH, CISSP, SCP, CISMP, ISO 270001/2, COBIT 5, PCI DSS or related Information Risk Certification.
• Member of ISACA and/or ICTSZ.
• At least five (5) years’ experience in Information Security, Risk Management or a similar role.
• Must have knowledge of Security Information and Events Management (SIEM).
• Must be conversant with Data Centre security operations.
• Strong knowledge of Information Risk Management and Analytics.
• Strong knowledge of ISO 27000 and PCI DSS standards.
• Good Banking Information Systems knowledge.
• Good knowledge of integration software and electronic funds transfer.
• Banking/Financial services knowledge.

 

JOB CORE COMPETENCIES

• Highly developed Interpersonal skills, able to engage with external and internal customers
• Good analytical/ financial skills
• Self-starter
• Networking
• Planning and organizing
• Optimizing for the accomplishment of tasks
• Drive results
• Effective time management

How to Apply

All applications must have an application/cover letter and detailed curriculum vitae indicating the position being applied for in the subject line and should be sent by email to [email protected] no later than Monday, 30th April, 2018.

Kindly note that you MUST attach copies of qualifications along with the application/ cover letter and curriculum vitae.

ONLY SHORTLISTED APPLICANTS WILL BE COMMUNICATED TO.

Zanaco provides equal opportunity in employment for all qualified persons and prohibits discrimination in employment (women are encouraged to apply).