Manager Information Security

Job description

NF 3 – Manager Information Security (1)
Employment Type: Contract
Location: Lusaka Province
Closing Date: October 23, 2025
Job Description

The Manager Information Security will be responsible for ensuring information and data security standards are implemented within INFRATEL for both internal and external customers. The Manager shall oversee INFRATEL’s security program. The Manager shall ensure complete adherence to data security principles and standards both for the data center as well as for clients. The Manager will ensure security compliance of all application to regulatory and international best practices. The Officer will ensure that all third-party applications and devices comply with the adopted security standards. The Manager shall ensure the acquisition and maintenance of relevant certifications for the business.

Key Responsibilities

Vulnerability Assessment

Manage regular cybersecurity vulnerability assessments of applications, web sites and infrastructure components
Oversee Implementation of Security on all systems

Security Policy and Procedures

Develop and maintain a formal cyber threat intelligence program through the collection, correlation and analysis of logevents/information
Develop, review, implement and maintain the ICT SecurityStrategy, Policy and Processes
Maintain Data Centre Physical Security
Monitor Video Footage compliance for all Data Centers
Develop Risk Assessment and Implement Penetration test
Conduct IT Risk Assessments and Compliance
Implement periodical penetration tests for systems

Business Continuity

Establish, implement and maintain an ICT business continuitymanagement methodology

Software Quality Assurance

Liaise with developers to ensure security is embedded in alldeveloped solutions
Security Awareness
Conduct regular employee security awareness programes
Implement security initiatives

Information security management framework

Knowledge of common information security managementframeworks, such as ISO 27001, COBIT, Uptime Institute, PCI DSS
Maintain all processes for which INFRATEL Corporation iscertified for
Responds to cybersecurity incidents

Reporting

Provide periodical reports for all operations

Management Updates

Provide and advise management on information securitymatters
Minimum Qualifications
 Two Professional certification from PCIDSS/CISSP/CISP/CISA/CEH or any cybersecurity certification
Professional Certification in ISO27001 Lead Implementer/Auditor is a must
Member of ICTAZ
Key Competencies and Skills
Good knowledge of networksecurity
Good knowledge of Applicationsecurity
Good knowledge of vulnerabilitymanagement
Good knowledge of threatmanagement
Good knowledge of cybersecurityintelligence and analysis
Extensive technical knowledge in Cyber Security management and quality assurance
Knowledge of Linux and Windows Systems
leadership skills for management and development of staff
Ability to collaborate and work with a team
Strong oral and written communication skills.
Strong background in various aspects of software development
Good customer support skills
Project Management
Logical thinking and problem-solving
Highly proven ethical conduct and free from criminal record; and
Highly computer literate and presentation skills.
Years of Experience Required
Minimum of five (5) years of Information Technology experience with a focus on Cybersecurity
Experiencein executing certifications and audits such as ISO27001, PCIDSS, SOC1, SOC2