For 15 years we have been building and managing telecommunications towers that are the essential backbone of mobile telecommunications in Africa - the leapfrog technology driving economic development, prosperity and self-sufficiency across the continent. Right now, IHS is leading a new telecoms service sector driven by the growth of middle class business and consumer demand for mobile and data. We are the partner of choice for Africa’s and the world’s leading network operators because they demand the widest reach and highest reliability for their customers, and the highest standards of governance and operational excellence for themselves. Our long-term contracts and strong sustainable cash flows mean IHS is a unique, low risk entry point for investment in Africa. Over the last four years, IHS has brought over US$5 billion of investment to the continent. Our belief is that the future economic and social development of Africa will be exponentially accelerated by mobile connectivity, and our team of over 1,000 engineers in five countries is focused on making this happen. We are committed to developing our people and the communities we serve, and to help people and businesses across the region build a powerful, prosperous future - by Africa and for Africa. IHS is Africa’s leading mobile infrastructure company. Founded in 2001 by an experienced team of engineers and business people, IHS serves clients responsibly in the building and managing of effective telecommunications infrastructure and by employing the highest quality people, services and equipment.
Job Description
Geographical Scope:
- Deliver IT services across Nigeria, Group entities, SSA, and MENA regions.
- Provide leadership and direction for the IT security team in all IHS entities in line with best practice like ISO27001
Functional Management:
- Security architecture: Planning, buying, and rolling out security hardware and software, and making sure IT and network infrastructure is designed with best security practices in mind
- Security operations: Real-time analysis of immediate threats, and triage when something goes wrong
- Cyber-risk and cyber intelligence: Keeping abreast of developing security threats, and helping the board understand potential security problems that might arise from acquisitions or other big business moves
- Data loss and fraud prevention: Making sure internal staff doesn't misuse or steal data
- Identity and access management: Ensuring that only authorized people have access to restricted data and systems
- Program management: Keeping ahead of security needs by implementing programs or projects that mitigate risks — regular system patches, for instance
- Investigations and forensics: Determining what went wrong in a breach, dealing with those responsible if they're internal, and planning to avoid repeats of the same crisis
- Governance: Making sure all the above initiatives run smoothly and get the funding they need — and that corporate leadership understands their importance.
Strategic Planning & Execution:
- Yearly assess “AS IS” situation, define and update the “Future State Blueprint” and related Technology roadmap of enhancements and projects, following technology trends.
- Identify potential threats to the confidentiality, integrity, and availability of the company’s systems and network.
- Identify and architect appropriate security technologies based on risks, policies and architecture.
- Support IT Architecture Review process and evaluate associated security of the proposed architectures.
- Lead efforts to establishing credible security awareness throughout IHS Nigeria
- Create and establish processes around vulnerability management
- Keep up with industry trends in cyber security
- Provide leadership and direction and establish baselines in ensuring IT security is part of the procurement process for all applications
- Drive purchase of security solutions, with Procurement to combat IT security risk
- Perform other functions as assigned by the IT Director or the CIO.
Qualifications
- Bachelor’s and/or Advanced degree in Computer Science or any related disciplines.
- Professional certification: CISA, ISO27001, CISSP, CISM, CEH
- Minimum 9 years’ relevant experience in Information Security, IT Control and IT Risk.
- Hands-on experience in security systems review, Acunetix, windows server, linux server, SIEM, Nipper, Nessus
- Demonstrable experience with change management, user access management, segregation of duties matrix, incident response.
- Thorough understanding of the latest security principles, techniques, and protocols.
- Bilingual is a plus; English, French
- Willing to travel
- Experienced enough to potentially act as Deputy Global IT Director. This means that knowledge of Infrastructure, Network, Service-Desk and On-site support is a plus.
Method of Application
Signup to view application details.
Signup Now
