Listings

Job Opportunity: Chief Information Security Officer (Ciso) Needed

Africa Golden Bank

📍 Douala - Cameroon

• Develop and implement the bank’s information systems security policy.
• Ensure compliance with relevant standards and regulations, including ISO 27001, ISO 22301, PCI-DSS, and banking regulatory requirements.
• Monitor information security performance indicators and risks.
• Integrate security measures into business projects.

• Identify and assess cybersecurity risks and coordinate corrective actions.
• Conduct risk assessments and coordinate security audits.
• Monitor the implementation of recommendations arising from security audits and controls.
• Prepare reports for senior management, risk committees, and relevant regulatory authorities.

• Contribute to the development and implementation of IT continuity and disaster recovery plans.
• Organise business continuity tests and monitor the implementation of corrective action plans.
• Ensure the availability of critical systems during major incidents.

• Contribute to the development of access authorisation matrices.
• Conduct regular reviews of user access rights and authorisations.

• Oversee the security of IT infrastructure, networks, applications, and databases.
• Ensure the implementation of access controls, encryption, backup systems, and security monitoring tools.
• Manage vulnerabilities and coordinate responses to security incidents.
• Lead efforts to detect, prevent, and respond to cyber threats.

• An engineering degree in a relevant field or a Master’s degree (Master 2) in Information Systems Security, Cybersecurity, or an equivalent qualification.

• At least five years of professional experience in IT security or a similar position.
• Experience in the banking sector will be an added advantage.

• ISO 27001 Lead Implementer or Lead Auditor
• ISO 22301 Lead Implementer
• ISO 27005 or EBIOS Risk Manager
• CEH, CISM, CISA, or CISSP

• Knowledge of cybersecurity tools, including vulnerability scanners, SIEM, DLP, and PAM solutions.
• Understanding of IT security regulatory requirements applicable within the CEMAC region.
• Knowledge of ISO 27001, ISO 22301, and PCI-DSS standards.
• Familiarity with banking operations, core banking systems, and IT environments.
• Proficiency in office software.

• High ethical standards and a strong sense of confidentiality.
• Excellent organisational skills, rigour, and attention to detail.
• Strong analytical and problem-solving abilities.
• A proactive, solution-oriented mindset.
• Excellent communication and persuasion skills.
• The ability to work under pressure and manage crisis situations.
• Strong leadership skills and the ability to engage stakeholders at all levels.