Responsible to: Principal Applications & Network Infrastructure
Responsible for:
- Salary Scale: EB 4
- Purpose of the Job:
To plan, and coordinate the risk assessment, install controls, and manage the security of the enterprise system networks, software, databases, and hardware that support UNEB’s business following the ICT Policy.
- Main Duties and Responsibilities:
- planning Information System Security Policy and sub-policies and overseeing their adherence following the national ICT Policy Standards.
- Coordinating/Auditing risk assessment for Enterprise Systems.
- Designing, configuring, and maintaining the UNEB network security infrastructure concerning Anti-virus monitoring, enterprise patch management, user authentication, and network perimeter surveillance).
- Configuring, monitoring, auditing, and troubleshooting server, and desktop environment security following set UNEB desktop policy and industry best practices.
- Managing Router and programmable Switch configurations and administration (Router and switch health, resource utilization (CPU, memory) monitoring and reporting per set ICT policy.
- Installing, and maintaining Enterprise Network software and administering software license tracking in line with UNEB ICT policies.
- Proactively planning and advising management on systems operations, security threats, and prevention.
- Documenting Network aspects and generating intelligence on infrastructure, and server systems (Mail, Proxy, Active directory, Systems Management Server, DNS, DHCP, etc), including scheme and host naming convention and maintenance.
- Monitoring Network, Database, Business application, and Hardware security
- Installing/implementing controls for security loopholes
- Monitoring performance of/advising about the Enterprise antivirus software.
- Key Performance Indicators:
- Information System Security Policy in place.
- UNEB network security infrastructure designed.
- All required security configurations /installations done.
- Enterprise Network software installed and well maintained.
- Software license tracking in line with UNEB ICT policies done.
- Management proactively advised on security threats and prevention.
- Controls for security loopholes in place.
- Key Decision-Making:
- Information security plan /strategy.
- Type or nature of configurations/installations.
- Person specification:
- Academic/Professional Qualifications
- Honors Bachelor’s Degree in any of the following areas: Information Technology Computer Science, Computer Engineering, Statistics, Physics/Mathematics, or equivalent.
- Any of these professional certifications in CISSP, CISA, CCAI, MCSA, ITIL, or equivalent.
- A postgraduate qualification in computer science, computer engineering, or equivalent. (will be an added advantage.)
- Work Experience
- At least 6 years of industry experience in managing Security Functions including performing ICT Security Risk Management and Assessment for a large corporate.
- Experience in working with a growing team of developers in a dynamic workplace that encourages creativity and innovation.
- Strong working knowledge and programming skills in C++ or C#, with a strong focus on MVC/P patterned applications.
- Proven database skills or knowledge of Oracle server RDBMS, SQL Server, and SQLSQL-related series; Advanced understanding of web and other technologies such as XML, Web Services, Remoting, SOAP, UDDI, etc.
- Extensive experience with several of the following: Oracle 10g, Linux, PL/SQL, TOAD, SQL Server, T-SQL, .Net, and Win 2008 server.
- Skills/Competencies
- Critical and logical thinking.
- Problem-solving skills.
- Problem-solving and decision-making.
- Strong research and development capabilities.
- Strong interpersonal, leadership, supervisory, and communication skills.
- High degree of integrity and confidentiality.
