Assistant Director: Compliance Monitoring at The Government Pensions Administration Agency (GPAA)

Qualification/s Requirements

• A relevant three (3) year National Diploma/Degree in Information Security (at least 360 credits) with 3-5 years relevant experience within Communication Technology / Information Security /ICT/Cyber Security field. knowledge of Client relations Management. Knowledge of Minimum Information Security Standards (MISS) Act. Knowledge of Information Technology. Knowledge of Security Systems. 

Key Performance Areas

The incumbent will be responsible for a wide variety of tasks which include but are not limited to the following: 

• Monitoring of Information Security Compliance within GPAA: Conduct compliance monitoring of systems, processes and personnel to establish the level of compliance with the Information Security initiatives. Coordinate and facilitate the training of new and current GPAA/GEPF staff members on possible threats and vulnerabilities. Implement findings as identified by the internal and external auditors. Monitor and revise plans as necessary to ensure data integrity, confidentiality, and availability. Submit reports of security related breaches, take appropriate actions to mitigate risks, investigate breaches, and make recommendations to the management for corrective action. Evaluate the GPAA/GEPF business unit’s operational processes to establish the level of compliance with the Information Security regulations. Review and propose improvements to the existing Information Security initiatives. Liaise with other business units to direct compliance issues to appropriate existing channels for investigation and resolution and provide reports to the management. Stay abreast of new and current trends and developments in the ICT and Cyber Security fields to advise ICT Security Management on the Implementation of counter measures.
•  Participate in sub-Business Unit Planning and reporting initiatives: Report on status of operations and projects on Security Management. Participate in the administrative processes of the Division. Conduct regular feedback and communication with ICT Security Management.