Duties and Responsibilities include: Develop and implement the Fund’s information security risk strategy to safeguard the Fund’s IT infrastructure, and systems and protect the Fund’s data.

Establish and maintain information security policies, processes, procedures, and system security baselines.

Monitor the Fund’s information technology architecture and advise management on emerging cyber threats that may affect the Fund’s information assets and operations.

Promote and conduct security awareness by developing and implementing a security awareness and training programme across the Fund.

Conduct periodic information technology risk assessments, penetration tests and vulnerability assessments and advise management on remediation measures.

Conduct risk assessment and testing of new technologies to enhance the Fund’s information security infrastructure.

Coordinate disaster recovery tests to ensure that the Fund can return swiftly to normal operations in case of a disaster.

Investigate information security incidents in accordance with the security incident management standard, produce reports with recommendations and ensure any remedial action is taken.

Develop, implement, and maintain policies and procedures that enforce compliance with DPPA (Data Protection and Privacy Act) and regulations.

Train staff on their responsibilities concerning data privacy and protection Act as a contact point for the Data Protection Office and data subjects regarding the processing of their personal data and the exercise of their rights Conduct data protection compliance audits and provide updates on the compliance of the Fund.

Monitor the Fund's compliance with the Data Protection and Privacy Act (DPPA), and other applicable data protection legislation and regulations.

Education Requirements: A Bachelor’s degree in information technology, Information Systems or Computer Science, or a related field.

Professional qualifications CISSP or CRISC or CISM Related Job Experience:7 years experience in information security management, 3 at the managerial level.