The Information and Security Systems Supervisor is responsible for overseeing the institution’s information security and cybersecurity posture, as well as the management of physical security systems and technologies, ensuring the protection of information assets, IT infrastructure, and facilities.
The incumbent works closely with the Network and Systems Supervisors to ensure secure and resilient IT operations, while supporting the IT Manager in managing security risks, strengthening operational resilience, and ensuring compliance with applicable regulatory requirements and international security standards and frameworks.
Responsabilities
Security Governance & Compliance
- Develop, implement, and maintain policies, standards, and procedures covering information security, cybersecurity, and physical security systems.
- Ensure compliance with applicable regulatory requirements and relevant international standards and frameworks, including ISO 27001 and the NIST Cybersecurity Framework (NIST CSF).
- Coordinate and support internal and external audits related to information security, cybersecurity, and physical security systems.
- Maintain accurate and up-to-date security documentation, including risk registers, incident records, security-related asset inventories, and other required records.
Cybersecurity Operations
- Oversee day-to-day security monitoring, threat detection, vulnerability management, and security incident handling.
- Manage and monitor cybersecurity tools and controls, including firewalls, Security Information and Event Management (SIEM), endpoint protection, Intrusion Detection and Prevention Systems (IDS/IPS), and identity and access management systems.
- Lead cybersecurity incident response activities and coordinate investigation, containment, remediation, and follow-up actions with relevant teams.
- Ensure secure configuration, timely patching, and appropriate hardening of systems, networks, and security infrastructure.
Physical Security Systems Management
- Oversee the operation, maintenance, availability, and security of CCTV, access control, alarm, fire detection, and other electronic physical security systems.
- Ensure secure configuration and appropriate integration of physical security systems with the IT infrastructure.
- Coordinate with Facilities and Security teams to ensure alignment of security systems, operational practices, and incident response procedures.
- Manage and periodically review user access rights, system logs, configurations, and monitoring tools associated with physical security platforms.
Risk Management
- Conduct and support security risk assessments covering information systems, IT infrastructure, and physical security technologies.
- Identify vulnerabilities and security risks, assess their potential impact, and recommend appropriate mitigation measures.
- Monitor identified security risks and follow up on agreed mitigation and corrective actions.
- Support business continuity and disaster recovery planning, testing, and improvement from an information and systems security perspective.
Collaboration & Technical Leadership
- Work closely with the Network and Systems Supervisors to ensure secure architecture, configuration, and operational practices.
- Provide technical guidance on secure system design, access controls, infrastructure changes, and the implementation of security requirements.
- Participate in IT and facilities-related projects to ensure that security requirements and controls are incorporated from the design and planning stages.
- Provide security input into the evaluation and implementation of new technologies, systems, and infrastructure changes.
Security Awareness & Capacity Building
- Lead and support security awareness initiatives for employees and contractors.
- Provide training and technical guidance to IT and relevant security personnel on secure practices, security controls, and emerging threats.
- Promote a culture of security awareness, accountability, and continuous improvement across the organization.