Local Information Security Officer (M/F)

Overview

Africa Global Logistics Rwanda Limited, located in Kigali Special Economic Zone, is a transport and logistics company committed to ensuring robust information system security. The Local Information Security Officer (LISO) is tasked with implementing effective controls safeguarding information systems, identifying and assessing security risks, and ensuring compliance with regulatory requirements and internal policies.

Key Responsibilities

• Implement and disseminate the Central Information System Security Policy, adapting it as necessary for local application and monitoring adherence within the organization.
• Apply short-term and long-term information security strategies aligned with the Bollore group’s objectives.
• Conduct comprehensive annual reviews and audits involving internal business partners and external stakeholders.
• Lead the LISO security team overseeing cybersecurity activities across the region.
• Manage proactive risk assessments for existing and new systems, aligning controls with current business goals in Eastern Africa.
• Communicate risks and mitigation recommendations to senior management for informed decision-making.
• Oversee the creation, implementation, and maintenance of information security policies ensuring protection of data at rest and in transit.
• Support compliance of local departmental processes with company policies, avoiding conflicts.
• Assist in executing Business Continuity Plans (BCP) and Disaster Recovery Plans (DRP) for regional operations.
• Implement measures such as intrusion detection systems, firewalls, and physical safeguards to proactively prevent security incidents.
• Ensure adherence to local data protection regulations and contractual obligations.
• Guide regional countries in applying the ISSP effectively.
• Generate and provide security KPIs and incident reports specific to Eastern Africa’s perimeter.
• Develop and participate in information security awareness and training programs at local, regional, and global levels.

Qualifications

• A diploma or degree in Information Technology is preferred.
• Professional certifications like CISSP, CISM, or CISA are advantageous.
• Mandatory certifications include ISO27001, ISO27002, and ISO27005.
• ITIL Foundations certification is required.

Experience

• 10 to 15 years of diverse IT experience spanning computer systems, networking, operating systems, software development, project management, regulatory compliance, risk management, and training.
• Minimum 2 years performing managed information systems responsibilities directly.
• Experience managing IT projects is a notable asset.

Key Skills & Attributes

• Strong leadership and managerial capabilities.
• Ability to supervise, prioritize, and enhance team productivity efficiently.
• Independent worker with initiative and reliability.
• Exemplary integrity and discretion given access to confidential information.
• Flexible and adaptable to diverse situations and environments.
• Confidentiality in handling sensitive information.
• Multitasking and analytical reasoning skills.
• Capability to instruct individuals with varying technical expertise levels.
• Effective communication skills, both verbal and written, including technical documentation.
• Excellent interpersonal skills and relationship building.
• Cultural sensitivity and engagement skills.

Deliverables and Reporting

• Monthly IT Security Management KPIs and dashboards.
• Regular meetings with LISO Security Team (daily/weekly) and weekly meetings with HQ Security Team.
• Monthly interactions with CISO, Regional IT/IS Manager, Regional MIS Managers, and Regional Management.
• Monthly updates to the Security Action Plan.