<p>Daystar Power Group is a Pan-African provider of solar and hybrid power solutions, offering its systems on a Power Purchase Agreement (PPA), fixed monthly fee lease or buy-out basis. All our solutions are accompanied by comprehensive maintenance services, to ensure the solutions run 365 days a year. We are currently operational in Nigeria, Ghana, Togo, Senegal, and Ivory Coast.</p><p>We are looking to engage a competent and experienced Business Information Security Officer (BISO) whose principal responsibility is to ensure that Daystar IDT stay in control of information risks and compliance ; even as we enable Business opportunities, while empowering Daystar’s workforce to have security in their DNA as we continuously improve the basic security of our digital landscape from the Lagos - Nigeria office.</p><p>We are seeking a hard-working, self-motivated, and well-organized individual with a focus on continuous improvement to exceed expectations.</p><p>Daystar Power Group is an equal opportunity employer, committed to promoting diversity and inclusion in the workplace. We prohibit all forms of discrimination and harassment based on race, colour, gender, religion, sexual orientation, national origin, disability, genetic information, pregnancy or any other characteristic protected by federal, state or local law.</p><p>The BISO is responsible for all IT/OT Governance, Risk, Compliance and Assurance.</p><p>BISO is the Daystar cyber and information security lead responsible for:</p><ul><li>Risk-based cyber and information security protection.</li><li>Ensuring risks are considered at the start across all forms of demand. </li><li>Manage end-to-end Group CISO risk management processes as needed.  </li><li>Ensuring security and compliance with key standards and policies, minimizing Daystar’s exposure to preventable risks and unlocking value.</li><li>Guiding Daystar’s Business/Functions to adapt Group CISO requirements by balancing value, affordability, do-ability and absorbability against risk exposure.</li><li>Interfacing with Group CyberDefense Team when an incident occurs, managing the incident to closure, in other to protect Daystar’s landscape (systems, networks, and data) from cyber threats; ensuring the safety and security of sensitive information ; and ensuring the confidentiality, integrity and availability of data by implementing robust defence mechanisms.</li></ul><ul><li>Manage IT security and operations risks, ensuring Daystar IDT can deliver secure and reliable products and services to the entire Group. The role would also be responsible for ensuring risks to information assets are identified and understood, that appropriate action is taken to mitigate risks and that there is sustained compliance of the organisation / business unit and its associated customers, users, suppliers or partners with the controls framework and related policies, standards and processes</li><li>Interfacing with Group CyberDefense Team when an incident occurs, managing the incident to closure, in order to protect Daystar’s landscape (systems, networks, and data) from cyber threats,</li><li>Single point of contact for control, compliance and operations risk.</li><li>Ensure IRM activities (e.g. risk acceptance, vulnerability, IRM projects, compliance status) are visible and actioned across Daystar. Reporting for Daystar Business and IDT leadership and facilitate review, escalation, drive implementation.</li><li>Design and own Daystar Control and Compliance reporting &amp; dashboard.</li><li>Drive change and implement simplification including elimination.</li><li>Drive gamification approach for Compliance and Control.</li><li>Lead Daystar Think Secure Champions network.</li><li>Act as Operational Readiness Framework Lead/Focal Point for Daystar</li><li>End-to-end accountable for the coordination and timely execution of outbound assurance to customers, partners and regulatory bodies.</li><li>Work hand in hand with other BISOs, IDT community and business orchestrating execution of outbound assurance queries from customers, partners and regulatory bodies.</li><li>Provide internal Assurance Services (incl. Testing): Performing end-to-end Compliance Testing on controls put in place to minimise risk. Focused Risk Reviews and Process Walk through for IT applications/processes to identify unmitigated risks. </li></ul><p></p><p><strong>Requirements</strong></p><ul><li>Bachelor’s/ Master’s degree in ICT, Electrical/Electronic Engineering and Computer Science. Candidates with degrees in other subjects but with strong hands-on domain achievements and relevant certifications in the areas listed above are also acceptable.</li></ul><ul><li>The Business Information Security Officer is expected to have relevant skills and experience in at least Domains – Information Risk Management and IT/OT Ops.</li><ul><li>At least 5 years in Information Risk Management and IT/OT Operations. </li><li>Certifications (one or more is desired): PCIP, CISSP, CISM, CISA, CCSP, CRISC, ISO 27001. </li><li>Proficiency in the use of the following Tools is a strong additional advantage - Power Apps and Power BI.</li><li>Excellent understanding of Information Risks Management processes and frameworks covering risk management, project risk engagement, project assurance and audit &amp; compliance management.</li><li>Knowledge of Cyber Ops concepts. Good understand technical vulnerabilities and ability to recommend remediations.</li><li>Experience in conducting and communicating security evaluations and communicating cyber risk impacts, consequences to all levels of stakeholders.</li><li>Proven ability in balancing IT/OT control and compliance requirements/needs/standards in terms of risk and affordability &amp; feasibility to the IT/OT operation teams.</li><li>In depth understanding of, and solid experiences with IRM and its impact on application development and IT operations as well as the IT Infrastructure.</li><li>In-depth understanding of IT/OT Operations and the challenges in delivery of reliable and secure solutions.</li><li>Understanding of the principles and practices involved in development and maintenance of the business IT applications</li><li>Detailed knowledge of Information Security developments and practices.</li><li>Demonstrates good practical knowledge of wide areas of IS concepts and practices. </li><li>Strong awareness of the evolving threat landscape and the main vulnerabilities and other weaknesses that IT solutions must avoid.</li></ul></ul><p><strong>Benefits</strong></p><ul> <li>Opportunity to work in a forward-looking, innovative company, with international group of colleagues.</li> <li>Unlimited career opportunities - depending on achievements and personal development.</li> <li>A competitive salary and benefits package with long term prospect in a fast-growing company.</li> </ul>

<div class="org-about-module__description">
<div id="ember55" class="ember-view organization-about-module__content-consistant-cards-description"><span class="lt-line-clamp__raw-line">Sub-Saharan Africa is in the middle of a power crisis, with large portions of the population not having access to electricity. Businesses and consumers who do have access to the grid, often have to deal with daily power outages which can last up to several days. Most businesses across Sub-Saharan Africa rely on expensive and polluting diesel generators to bridge the supply-demand gap of electricity. Daystar Power focuses on hybrid solar power solutions for commercial customers for either a cash sale or a monthly fee. Daystar Power delivers three significant benefits to its customers: 1) reducing the cost of energy, 2) providing a stable power supply and 3) reducing pollution.</span></div>
</div>
<div class="org-about-module__content-improvement">
<div class="org-about-module__content-box">&nbsp;</div>
</div>

Business Information Security Officer (BISO)

About the Job

About the Company

Daystar Power

Similar Jobs

Senior Manager - Cyber Security

Senior Manager - Cyber Security

Global IT Security Expert _ IAM

Global IT Security Expert _ IAM

Cybersecurity and Data Protection Manager

Cybersecurity and Data Protection Manager

Data Protection & Governance Specialist

Data Protection & Governance Specialist

Cyber Security Architecture Lead

Cyber Security Architecture Lead

Senior Manager of Information Security

Senior Manager of Information Security

Information Security Analyst

Information Security Analyst

Information System Security Officer

Information System Security Officer

Senior Manager, IT & Cybersecurity

Senior Manager, IT & Cybersecurity

Information Systems Security Officer (ISSO) | Information Security

Information Systems Security Officer (ISSO) | Information Security