Klasha was founded in 2018 in Lagos, Nigeria by a team of ex-Amazon, Shopify, Net-a-Porter and ASOS employees. It was founded to make consumer goods online more accessible to customers across Africa. At Klasha, we believe that consumers in Africa should have the same frictionless access to the goods they want regardless of their geographic location. So, we've built a couple of cool products to facilitate this.
About the Role
As the Information Security Specialist, you will be responsible for improving the security of our computer networks and databases. As part of our team at Klasha, your first task will be to audit our entire security system to identify weaknesses in hardware, software, or employee procedures. This critical role will be tasked with ensuring the security and integrity of information systems. It requires a proactive approach to safeguard sensitive data against unauthorized access, breaches, and various cyber threats. The specialist will be responsible for developing, implementing, and maintaining robust security protocols and systems, ensuring that all security measures are up-to-date and effective
Key Responsibilities:
- Develop and Implement Security Policies: Design, develop, and enforce comprehensive security policies, protocols, and procedures that align with industry standards and organizational goals.
- Network Traffic Monitoring: Continuously monitor and analyze network traffic to detect any unusual activity, potential security incidents, and vulnerabilities that could compromise the system.
- Security Audits and Risk Assessments: Conduct regular security audits and thorough risk assessments to identify vulnerabilities and recommend appropriate mitigation strategies.
- Incident Response: Act promptly in the event of a security breach or incident, leading the investigation and remediation efforts to minimize damage and prevent recurrence.
- Manage Security Tools and Technologies: Oversee the deployment, configuration, and maintenance of security tools and technologies such as firewalls, intrusion detection systems, and antivirus software to ensure optimal performance.
- Employee Training and Guidance: Provide training sessions and ongoing guidance to employees on security best practices, creating a culture of security awareness within the organization.
- Stay Informed: Keep abreast of the latest security threats, trends, and emerging technologies by participating in professional forums, attending conferences, and pursuing continuous education.
- Compliance Management: Ensure that all security measures comply with relevant laws, regulations, and industry standards.
- Collaboration with Engineering Team: Work closely with the Engineering department and other stakeholders to integrate security measures into the overall IT infrastructure and development processes.
- Documentation and Reporting: Maintain detailed records of security incidents, audits, and compliance efforts. Prepare regular reports for management and stakeholders to keep them informed of security status and improvements.
Qualifications:
- Educational Background: A Bachelor's degree in Information Security, Computer Science, or a related field is essential. Advanced degrees are a plus.
- Professional Certifications: Holding professional certifications such as CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), or CEH (Certified Ethical Hacker) is highly preferred.
- Experience: Proven experience in information security or a related role is required. Experience in conducting security audits, risk assessments, and incident response is crucial.
- Technical Knowledge: Strong knowledge of security protocols, principles, and standards. Familiarity with various security tools and technologies.
- Problem-Solving Skills: Excellent problem-solving and analytical skills to identify security issues and develop effective solutions.
- Teamwork and Communication: Ability to work independently and as part of a team. Strong communication and interpersonal skills to effectively collaborate with various stakeholders.
- Attention to Detail: High attention to detail and a commitment to accuracy in all aspects of security management.
- Continuous Learning: A proactive attitude towards continuous learning and professional development to stay current with the evolving security landscape.
Method of Application
Signup to view application details.
Signup Now
