The Cybersecurity Officer is responsible for protecting the organization's information systems, networks, applications, and digital assets against cyber threats, unauthorized access, data breaches, and security vulnerabilities.
The role involves implementing and monitoring cybersecurity policies, conducting security assessments, managing security incidents, ensuring regulatory compliance, and promoting cybersecurity awareness across the organization. The officer works closely with IT, software development, infrastructure, and management teams to maintain the confidentiality, integrity, and availability of organizational information and systems.
Security Monitoring
Monitor networks, systems, and applications for suspicious activities, security breaches, and potential threats.
Risk Management
Identify, assess, and mitigate cybersecurity risks and vulnerabilities.
Security Implementation
Implement firewalls, antivirus solutions, endpoint protection, access controls, and intrusion detection systems.
Incident Management
Investigate, respond to, document, and resolve cybersecurity incidents.
Vulnerability Management
Conduct vulnerability assessments, penetration testing coordination, and security audits.
Data Protection
Ensure sensitive organizational and customer data is protected against unauthorized access, loss, or disclosure.
Policy Development
Develop, review, and enforce cybersecurity policies, procedures, and security standards.
Access Management
Monitor user access rights, permissions, authentication, and privileged accounts.
Compliance
Ensure compliance with applicable data protection laws, cybersecurity standards, and regulatory requirements.
Security Awareness
Conduct cybersecurity training and awareness programs for employees.
Backup and Recovery
Support disaster recovery, business continuity, and data backup security processes.
Reporting
Prepare cybersecurity incident reports, risk assessments, audit findings, and management security reports.
Academic Qualifications
- Bachelor's degree in:
Computer Science.
Information Technology.
Cybersecurity.
Information Systems.
Computer Engineering or a related field.
Professional Certifications (Added Advantage)
CompTIA Security+.
Certified Information Systems Security Professional (CISSP).
Certified Ethical Hacker (CEH).
Certified Information Security Manager (CISM).
ISO/IEC 27001 Lead Implementer or Lead Auditor.
CompTIA CySA+.
Work Experience
2–5 years of relevant experience in IT security, network administration, systems administration, or cybersecurity.
Experience in security monitoring, vulnerability assessment, incident response, and risk management.
Experience working with enterprise applications, databases, cloud infrastructure, and network security is an added advantage.