Information Security Specialist (Kingston, Jamaica) - The Electoral Commission of Jamaica

 The Electoral Commission of Jamaica

Career Opportunity

Invites applications from suitably qualified persons for the post of

Information Security Specialist (MIS/IT6) (two (2) year contract)

Job Purpose

To design, implement and maintain a comprehensive information security plan and risk management program to protect the Commission's information technology networks and database management systems from cyber-attacks, while maintaining the confidentially, integrity and availability of information assets.

Core Functions

• Ensures information security policies, standards, and procedures are up to date.
• Initiates, facilitates, and promotes activities to foster information security awareness within the organization.
• Regularity reviews application design/implementation utilizing threat modelling, risk analysis and attack surface analysis.
• Evaluates security trends, evolving threats, risks and vulnerabilities and applies tools to mitigate risk as necessary.
• Ensures that the disaster recovery, business continuity, risk management and access controls needs of the organization are addressed.
• Participates in the development, implementation, and ongoing compliance monitoring of all information assets to ensure security concerns, requirements, and responsibilities are addressed.
• Establishes and administers a process for investigating and acting on security incidents which may result in security breaches.
• Ensures the organization is in compliance with the administrative, technical and physical safeguards.
• Maintains current knowledge of applicable policies, laws, licensing and certification requirements and accreditation standards.

Required Knowledge, Skills and Abilities

• Core understanding and hands-on use of application security scanning software and related penetration testing tools.
• Knowledge in developing information security policies and procedures inclusive of those pertaining to business continuity and disaster recovery.
• Knowledge in reviewing laws and regulations relating to information security and developing appropriate policies and procedures to ensure compliance.
• Practical exposure to system architecture, network solutions and technologies, data retention and destruction, strategies related to access, authentication, authorization, identity management, and security practices, and awareness training.

Required Qualification and Experience

• Undergraduate degree in Computer Science, Engineering or equivalent from an accredited tertiary institution.
• Any of the following security certifications: CISSP, CEH, CISM, CompTIA Security+ or equivalent.
• Minimum two (2) years' experience in information security or risk management.
• Excellent oral and written communication skills.

Salary is within the approved government scale.

Applications should be submitted by Monday, June 26, 2023 to:

The Director, Human Resource Management,

P.O. Box 671, G.P.O.,

Kingston. 

Email: hr@eoj.com.jm

We thank all applicants for their interest but only shortlisted candidates will be contacted.