Microsoft Security Specialist

How You'll Contribute:

1. Responsible for enterprise-wide security in the Business Unit, effectively acting as the Chief Information Security Officer for the BU, interfacing with our Client's key stakeholders in the African region and other international locations, as well as the Global Information Security group.
2. Operate in a matrix organization with functional alignment into Global Information Security and dotted reporting into the regional Technology organization.
3. Work directly with business unit leaders to facilitate risk assessment and risk management processes.
4. In close collaboration with local IT, PMO, and Global Information Security, drive execution of Information Security projects, including technology deployments, ongoing security assessments, and other risk management activities as per our Client's Information Security strategy and plan.
5. Maintain and enhance an information security management system in accordance with ISO standards.
6. Support and develop the information security strategy, risk management initiatives, and become a trusted advisor and thought leader to meet business, client, and regulatory demands.
7. Understand and interact with related disciplines through regulatory forums, committees, and business engagements to ensure the consistent application of policies and standards across all technology projects, systems, and services.
8. Provide leadership, oversight, and performance management to the organizations' geographically distributed information security department, including coaching and motivation for high performance.
9. Maintain accountability for the Information Security budget in the region.
10. Facilitate certifications, as necessary and determined by the business or Global Information Security, for SSAE 18, PCI DSS, and ISO.
11. Partner with business stakeholders across the company to raise awareness of risk management concerns and to drive and influence their resolution.
12. Work within the project and resource prioritization process to ensure security projects and efforts are represented, prioritized, and executed.
13. On a regular basis, report status of security posture and progress against objectives to senior management in Global Information Security and regional IT.
14. Maintain a thorough understanding of current security deviations, open assessment and audit findings, and vulnerabilities in our Client's security posture.
15. Mobilize and support regional responses to threats and incident investigations in an effective and timely manner.
16. In conjunction and coordination with Global Information Security, maintain and test incident response processes and ensure its continued integration with regional and global escalation protocols.
17. Oversee the completion of security audits by customers and data providers.
18. Prepare and contribute to periodic communication and presentations to local business and functional leaders regarding regional security posture and direction.
19. Complete annual planning process through ownership and accountability for BU plans for Information Security that align with global strategy but reflect nuances of local needs, where appropriate.
20. Assist with the overall business technology planning, providing a current knowledge and future vision of technology and systems.

What You'll Bring:

1. 12 years+ of extensive experience in risk management, information security, and IT.
2. 10 years Information Security Management.
3. Degree in Business Administration or a technology-related field required.
4. Professional security management certification in Information Security / Cyber Security or industry qualifications (CISSP, CISM, CISA, CCSP).
5. Strong leadership, project management skills, time management, and problem-solving skills.
6. Ability to work in a virtual, global matrix organization.
7. Innovative thinking and leadership with an ability to lead and motivate cross-functional, interdisciplinary teams.
8. Experience with working with local and regional regulators and authorities such as the National Credit Regulator & the Information Regulator to ensure compliance with local regulations.
9. Experience with contract and vendor negotiations and management including managed services.
10. Experience with designing, developing, and implementing security processes, controls, and technologies.
11. Working experience with information security solutions in areas such as Identity Management, Vulnerability Management, Content Filtering, DLP, IDS / IPS, FIM, and Incident Response.
12. Working knowledge of industry frameworks and standards such as SSAE 18, PCI DSS, and ISO.
13. Knowledge of information security in Windows and Linux operating systems as well as TCP / IP networks.
14. Understanding of web application and product security controls.
15. Experience with performing system audits and security assessments, and in interfacing with external auditors.
16. Experience with reporting security metrics (dashboards, KPIs, KRIs).
17. Ability to operate as an information security business partner and advisor to senior executives and, where necessary, a hands-on contributor on technology deployments and other projects.

What we offer: We aim high and are reaching for new heights every day. This is a terrific time to join our team as we build on our commitment to integrity, service, reliability, and innovation. These values stand behind the decisions we make every day, as well as our relationships at work and with the clients we serve. We believe in the power to achieve and are taking it in bold new directions.

Who we are: Our Client is a global leader in credit information and information management services, giving businesses, consumers, and the global community the power to achieve their goals. Businesses count on us to better manage risk and customer relationships.