Head of IT Security SSA at DHL

Role Context

• Responsible for safeguarding the organization's information systems within the Sub-Saharan Africa (SSA) region by developing and implementing robust security measures. This role involves ensuring compliance with security policies, managing security operations, and staying abreast of emerging security threats. The IT Security Manager will play a crucial role in protecting the integrity, confidentiality, and availability of data and IT infrastructure across the SSA region. Provide effective IT disaster recovery and information technology support to general company disaster recovery and business continuity in line with overall regional business strategy and functional objectives, and Group guidelines and policies
• The IT Security Manager will work closely with various stakeholders, including senior management, IT teams, compliance officers, and external vendors. Effective communication and collaboration with these stakeholders are essential to ensure that security initiatives align with business objectives and meet regulatory requirements. Additionally, the IT Security Manager will engage with external partners, such as law enforcement and cybersecurity experts, to address significant security incidents and stay informed about emerging threats.
• The IT Security Manager is responsible for managing the overall security posture of the organization's IT infrastructure within the SSA region. This includes developing strategic security initiatives, ensuring the implementation of security measures, and maintaining compliance with security policies and regulations. The role also involves managing budgets, resources, and timelines for security projects to ensure they are delivered on time and within scope.

Key Responsibilities

Security Strategy and Planning:

• Tactical planning for the region thats aligned to the business strategy and objectives.
• Implement and maintain the organization's IT security strategy and policies.
• Conduct regular risk assessments and audits to identify and mitigate potential security threats.
• Collaborate with senior management to align security initiatives with business objectives.

Incident Response and Management:

• Lead the response to security incidents, including investigation, mitigation, and reporting.
• Develop and maintain an incident response plan, ensuring the organization is prepared for potential security breaches.
• Coordinate with external parties, such as law enforcement and cybersecurity experts, during significant incidents.

Security Operations:

• Oversee the implementation and maintenance of security technologies, such as firewalls, intrusion detection/prevention systems, and encryption solutions.
• Monitor network traffic and system logs for unusual activity, taking appropriate action to address potential threats.
• Ensure the organization complies with relevant security standards and regulations, such as GDPR, ISO 27001, and PCI-DSS.

Policy Development and Enforcement:

• Develop and enforce IT security policies, procedures, and guidelines to protect sensitive data and systems.
• Conduct regular training sessions and awareness programs to educate employees about security best practices and protocols.

Vendor Management:

• Evaluate and manage relationships with third-party vendors and service providers to ensure their security practices align with the organization’s standards.
• Review and negotiate security-related contracts and agreements.

Continuous Improvement:

• Stay updated on the latest cybersecurity trends, threats, and technologies to continuously improve the organization’s security posture.
• Recommend and implement enhancements to existing security measures based on industry best practices and emerging threats.

Minimum Requirements

Education & experience

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Professional certifications such as CISSP, CISM, CEH, or equivalent are highly desirable.

Skills

• Minimum of 5-7 years of experience in IT security, with at least 4 years in a managerial or leadership role.
• Strong knowledge of security frameworks, standards, and best practices.
• Experience with security technologies such as firewalls, IDS/IPS, SIEM, encryption, and vulnerability management tools.
• Excellent analytical, problem-solving, and decision-making skills.
• Strong communication and interpersonal skills, with the ability to collaborate effectively with stakeholders at all levels.
• Ability to manage multiple projects and priorities in a fast-paced environment.