The Director Information Security & Data Privacy is responsible for leading security operations, cyber threat monitoring, incident response, and operational information security functions to safeguard digital platforms and services. The position oversees Security Operations Centre (SOC) activities, threat intelligence, cyber incident management, operational security monitoring, and implementation of data protection controls to ensure the confidentiality, integrity, and availability of government information assets.
Qualification: Minimum bachelor’s degree or a Master's degree will be preferred. Professional certifications in information security will be considered an added advantage.
Experience: Minimum 10 – 12 years of experience in cyber security operations, information security, including at least three (3) years in a managerial or supervisory role. Experience in government, critical infrastructure, or enterprise technology environments will be preferred.
Core Competencies: Leadership & Team Management; Crisis Handling; Analytical Thinking; Decision-Making Under Pressure. Role-Specific Competencies: SOC Operations; Threat Intelligence & Hunting; Incident Response & Forensics; MITRE ATT&CK, NIST, ISO 27001.
Duties and Responsibilities
• Oversee the development and maintenance of internal cyber security policies and the adoption of federal cyber security standards and Ministry of IT directives.
• Own data protection and privacy governance for citizen data processed through digital platforms.
• Lead SOC operations, ensuring continuous monitoring of networks, endpoints, applications, and digital platforms to detect and respond to cyber security threats.
• Direct cyber threat intelligence and security monitoring activities to proactively identify emerging threats and strengthen security infrastructure.
• Lead cyber incident detection, analysis, containment, recovery, and post-incident review activities, ensuring timely restoration of affected services.
• Oversee digital forensic readiness and investigations in line with legal requirements.
• Define and monitor SOC KPIs, SLAs, and security metrics, implementing continuous improvement initiatives where required.
• Conduct incident simulations and tabletop exercises and implement post-incident corrective actions.
•
• Coordinate with CERTs, regulators, and CTO operations teams on incident handling.
• Prepare and present periodic cyber security operational reports, threat intelligence updates, incident analyses, and strategic recommendations to the Director General
• Oversee the implementation and monitoring of operational data protection and privacy controls to safeguard information processed through digital platforms in accordance with applicable policies and regulatory requirement.
Back to Jobs
-140409200338.png)
