Information Security Officer

ABOUT THE COMPANY

Live a well-travelled life in style and experience authentic cuisines, indigenous aesthetics and spectacular delights in some of the world’s most extraordinary locations with Serena Hotels. Our diverse collection of thirty-five hotels, resorts, safari lodges, camps and forts within East Africa, Mozambique and South and Central Asia are for those who lean towards distinctive and inspirational experiences.
We believe in introducing our guests to the true essence of their hosts. Our destinations offer unusually complex and colourful ethnic character, celebrating a charismatic mix of peoples ranging from the colourfully cloaked Maasai of southern Kenya and northern Tanzania to the vibrant Baluch people of southeast Pakistan. Whether it’s your maiden voyage to Africa or Asia or you are revisiting your favourite destination, discover how each of our properties offers its own distinguishing style, reflecting its locations cultural heritage and artistic idioms, where the delight is in the detail that delivers world class hospitality and exceptional service.
At Serena Hotels, your Serena Experience begins once you arrive.

JOB SUMMARY

RequirementsA Bachelor's degree in Computer Science or a closely related disciplineCISM or CISSP Certification. Any other security certification will be an added advantageMinimum of 3-5 years experience in a similar position is essentialExcellent verbal, written, and interpersonal skills.Proven leadership skillsSelf-motivated and a good team player.Must have in-depth knowledge of business processes as well as process controls and risks and how these relate to relevant IT audit procedures.A proven record of dealing with complex projects and meeting conflicting demandsKnowledge of Network monitoring tools, Traffic analysis, and intrusion detection systemsKnowledge of information security management best practices such as ISO 27000Knowledge of threat and vulnerability analysis, risk assessment business impact analysisExperience in writing effective security policies and procedures

RESPONSIBILITIES

Formulating and implementing a strategy for the deployment of information securityPerforming formal security audits and risk assessments with a view to minimizing exposureMonitoring security vulnerabilities and hacking threats in network and host systemsTracking the latest IT security innovations and keeping abreast of the latest cybersecurity technologiesImplementing an effective process for the reporting of security incidents and communicating with key stakeholders about IT security threatsMonitoring the daily operation and implementation of the IT security strategyConducting a continuous assessment of current IT security practices and systems and identifying areas for improvementManaging the IT security budget and communicating this with the appropriate partiesImplementation of Network & Server Security including firewalls and patch managementContinually review IT Security installations and incorporate improvements and innovations as a matter of routine.Review and enforcement of the IT policies, procedures, and standardsDevelop and deliver training/guidance verbally, written, or within training workshops as appropriate to IT Team and IT Systems UsersAssist with legacy application security enhancementAssist with security on Serena’s e-commerce platformsIndirect through Site IT teams Ensure ICT Policy, Procedure, and Standards implementation plan is developed and actionedEnsuring disaster recovery and business continuity plans are up-to-dateOverseeing the investigation of reported security breachesMonitor Information System audit issuesFollow-up IT security tasksImplementation of Network, Servers, and workstation Security

REQUIRED SKILLS

System and network security, Firewalls, Information security, IT management, System administration, Security operations, System (IT) auditing, Security system installation and maintenance

REQUIRED EDUCATION

Bachelor's degree