Job Description
Specialist-IT Security
at Etisalat Nigeria in Lagos
Reports To: Manager- IT Security
Job Summary:
Analyze the Etisalat Nigeria information security environment and recommend measures to safeguard valuable enterprise information assets
Principal Functions:
Work with business units and other risk management/assurance functions to identify security requirements, using methods such as risk and business impact assessments
Implement strategies and plans to achieve security requirements and address identified risks
Perform control and vulnerability assessments to identify control weaknesses and assess the effectiveness of existing controls, as well as recommend remedial action
Report to management concerning residual risks, vulnerabilities and other security exposures, including misuse of information assets and non-compliance
Ensure the development, documentation and implementation of agile disaster recovery and business continuity plans
Play an advisory role in application development or acquisition projects in orderto assess security requirements and controls, as well as ensure that approved controls are implemented
Collaborate on critical IT projects to ensure that security issues are addressed throughout the project life cycle
Assist in the development of IT security architecture and policies, principles and standards
Develop processes, procedures and supporting service-level agreements (SLAs) to ensure that security controls are effectively managed and maintained
Define security configuration and operations standards for security systems and applications, including policyassessment and compliance tools, network security appliances and host-based security systems
Develop and validate baseline security configurations for operatingsystems, applications, networking and telecommunications equipment
Assist with the resolution of negative audit findings reported by Etisalat Nigeria internal and external auditors
Assist system administrators(and other IT personnel) in the resolution of reported security incidents
Participate in security investigations and compliance reviews as requested by internal and external auditors
Research, evaluate, design, test, recommend and plan the implementation of new and/ or updated information security technologies
Educational Requirements:
First degree or equivalent in Electrical/ Electronic or Telecommunications Engineering, Computer Science, Engineering, and/ or any other relevant discipline
Experience & Skills:
Between two (2) and five (5)years directly relevant post-NYSC work experience
Relevant Enterprise Information Security and Architecture Certifications required, e.g CISA, CISSP, CCNA, CCSP, ITIL, CoBIT, etc
Ideal candidate must be ableto demonstrate:
• Expert-level experience and/ or knowledge of at least two IT disciplines, including technical infrastructure, application development, middleware, database management and operations
• High-level exposure to multiple, diverse technical configurations, technologiesand processing environments
• High-level exposure to IT consulting and understanding of rules of professional engagement
• Familiarity with renowned Information Security standards, e.g ISO27000:2005
• Excellent project/ programme and business process management skills
Click to apply on or before 19th September 2012