NITA-U hereby invites applications from suitably qualified Ugandan Nationals to fill the vacancy of Director Information Security.
JOB TITLE: DIRECTOR INFORMATION SECURITY
REPORTS TO: EXECUTIVE DIRECTOR
DIRECTORATE: INFORMATION SECURITY
Job Role: The Director will be the focal point and responsible for nationwide planning, development, coordination, management, continuous monitoring and assurance of National Information Security in conjunction with relevant directorates and agencies.
Key Results Area/Accountabilities
• Lead in the preparation and implementation of the directorate’s operational plan and budgets
• Development of the National Information Security Strategy and its implementation
• Conduct periodic assessments of IT security risks in Ministries, Departments and Agencies / Local Government (MDAs /LGs) (including review of security risks and approval of new technologies and applications) and communicate these assessments to the Top Management of the MDAs / LGs
• Develop, implement and manage a living National Information Security Risk Register which will timely advise Government on what mitigation programmes should be implemented to reduce risks to acceptable levels.
• Develop and implement an information security program for MDAs / LGs, in conformance with relevant National and International Security standards.
• Develop, maintain and promote a consistent set of recommended standards for information security in MDAs / LGs, together with the appropriate guidelines procedures
o ensure that the prescribed standards and controls are implemented, reviewed and audited in line with International Information Security standards and that any deficiencies identified are responded to
o ensure that the MDAs / LGs comply with appropriate International Information Security standards, guidelines and procedures
• Lead and take ownership of Information Security Certification Process for MDAs / LGs.
• Coordinate the development and testing of the required Business Continuity Plans (BCP) and Disaster Recovery Plans (DRP) for all the critical National IT systems and applications in MDAs / LGs.
• Provide consultancy in respect of National Information Security and contribute to security reviews of information systems and investigations of security incidents.
• Act as Uganda Government Virus focal point in respect of anti-virus measures, response procedures and incident investigations. Plan and implement contingency measures to minimise disruption; assist with developing fall-back plans and procedures.
• Ensure the establishment and management of the National Computer Emergency Response Team (CERT) for MDAs / LGs.
• Ensure the Implementation of Public Key Infrastructure.
• Establishment and management of the National Computer Forensic team.
• Contribute to reviews of new security technology in MDAs / LGs.
• Take lead in the creation of the National Information Security Forum and its operations
• Liaise closely with all National Information Security personnel and teams in MDAs / LGs.
• Advice on Research and Development in the field of Information Security in Uganda.
• Conduct and coordinate specialized ICT forensic audits to establish the root causes of Information Security incidents to determine extent of information security breaches to mitigate re-occurrence
• Represent NITA-U in all regional and international information security forums
• Perform any other duties which may be assigned from time to time
Qualifications
• A minimum of Master’s degree in Computer Science, Information Technology or related discipline from a recognized/reputable academic institution is required.
• Relevant Information Security certification from recognized professional bodies/associations e.g. CISSP, CISM, Certified Information Systems Auditor (CISA) is essential.
• Project Management certification (e.g PRINCE2, PMP etc) is an added advantage
• PhD in relevant fields is an added advantage.
Experience
• At least 10 years’ experience in management of infrastructure services with a reputable organization of which six years should have been at senior management level.
• At least 5 years’ experience in management of Information security at senior level in a mission critical environment.
• Experience in developing and implementing information security compliance programms in large organisations is an added advantage.
• Experience in development of information security guidelines and procedures is an added advantage.
Skills/Competencies
Competence Level Functional Competence
Mastery (Expert in) Access Control Systems Any tool or system which provides access security control (i.e prevents unauthorised access to systems). Example: ACF2
Mastery (Expert in) Consultancy or Technical Specialism Specialist knowledge and skills in one or more functions, technologies or industries. Examples: business process re-engineering, IP networks, financial services, optical transmission engineering, customer relationship management, area networks, cabling.
Mastery (Expert in) Corporate, Industry and Professional Standards Standards associated with the practitioner's current Role. Examples: organisational network performance standards, help desk procedures, corporate quality and change management processes, IT Infrastructure.
Mastery (Expert in) Infrastructure Architecture The frameworks and principles on which networks, systems, equipment and resources are based. Examples: Windows NT, UNIX, Oracle, TCP/IP, SDH, DWDM, TDM, ATM.
Mastery (Expert in) Operating Infrastructure Knowledge of the common IT infrastructure (hardware, databases, operating systems, local area networks etc) used within mission critical organisations.
Skill (Proficient in) Consultancy The principles, processes and practices associated with consultancy in the IT environment. Examples: managing the client relationship, planning the assignment, consultancy styles.
Skill (Proficient in) IT Audit Principles, practices, tools and techniques of IT auditing.
Skill (Proficient in) National/International Standards Standards associated with IT practice. Examples: PRINCE2, SSADM, IEEE802.3, ITU(T), ETSI, BSI, ISO, COBIT, ITIL, PMP etc.
Skill (Proficient in) Networking and Communications The planning and management of the interaction between two or more networking systems, computers or other "intelligent" devices. Examples: ISDN, ATM, Ethernet, TCP/IP.
Knowledge (Familiar with) Software Testing Tools Software tools which automate or assist any part of the testing process, including the test management process, the execution of the tests, the comparison of actual outcomes to predicted outcomes, the setting up of test preconditions, and other test control and test reporting functions. Examples: test management tools, capture replay tools, data preparation tools, debugging tools, load test tools, security penetration test tools, requirements test tools.
Competence Level
Other Competence
Mastery (Expert in) Legislation Relevant national and international legislation. Examples: e-Signature Act, e-Transactions Act, Data Protection Act, etc
Mastery (Expert in) Risk Management Methods and techniques for the assessment and management of business risk. Example: CRAMM.
Skill (Proficient in) Business Characteristics The functional structure of businesses and other organisations; their mission, objectives, strategies and critical success factors.
Skill (Proficient in) Business Process Improvement Techniques Techniques for streamlining business processes which have been modelled and understood. Examples: error-proofing, value added assessment, process cycle time reduction, future-proofing, resilience, reliability, cost effectiveness.
Skill (Proficient in) Business Proposals Methods and techniques for preparing and presenting business cases, invitations to tender and statements of requirements both orally and in writing.
Skill (Proficient in) Information Capture Techniques The selection and application of information gathering methods, tools and techniques which are appropriate to the information required and the sources available. Examples: contextual enquiries, focus groups, structured interviews, questionnaires, observation, statistical analysis.
Skill (Proficient in) Network Data Gathering Techniques The selection, implementation and application of network data gathering methods, tools and techniques which are appropriate to the information required and the sources available. Examples: network management and monitoring, performance measurement, statistical analysis.
Skill (Proficient in) Project Risk Management The identification, assessment and management of project risks, which could result in time or cost over-runs, or failure to deliver products which are fit for purpose.
Skill (Proficient in) Quality Management The system or method for the management of quality within the employing organisation.
Knowledge (Familiar with) Job Interviewing Techniques Methods and techniques used when interviewing someone for a job or position.
Knowledge (Familiar with) Marketing Techniques The methods and techniques of marketing. Examples: market economics, market research, brand management, pricing, promotion.
Knowledge (Familiar with) Research Techniques Methods, techniques and tools for the systematic discovery, analysis, and reporting of knowledge about all aspects of information systems.
EMPLOYMENT TERMS
As a responsible and equal opportunity employer, NITA-U is committed to providing competitive employment terms, rich career development opportunities and a healthy working environment to deserving professionals with the right qualifications, skills, competencies and experiences. This position falls under N2 scale and benefits are prescribed in the NITA-U policy documents.
APPLICATION PROCESS
Interested applicants are advised to refer NITA-U official website: www.nita.go.ug for more details. Applications should enclose a Standard Application Form (downloaded form), a cover letter, a detailed curriculum vitae specifying day time telephone contact, postal and email addresses of both the applicant and three referees, copies of certificates and testimonials to the address below. The deadline for applications is 30th July 2012 at 5pm
The Executive Director,
National Information Technology
Authority – UGANDA (NITA-U),
Palm Courts, Plot 7A, Rotary Avenue (former lugogo bypass)
P.O. Box 33151, Kampala-Uganda
Tel: 0417 801 038
No comments: