Senior Cybersecurity Consultant

Lead the development and implementation of a comprehensive enterprise-wide Information Security and IT Risk
Management program and secure the buy-in of the Group Chief Risk Officer.

Update and maintain the Cyber Security strategy to leverage latest technology trends and prevent future security
threats, and share changes with relevant stakeholders.

Lead IT Security objectives and policies, through the identification of Interswitch Information and Infrastructure
Security risks.


Collaborate with Risk Team Leads to schedule periodic risk assessments and oversee respective profiles that
facilitate monitoring of IT Security risk.

Identify and communicate the actions needed to implement the Information Security strategy and business plan,
explain the relationship to the broader Interswitch mission, vision and values.

Prepare and manage short-term and annual workforce plans using existing analytical frameworks and tools to
identify the number and mix of staff required to meet the demand forecast.

Prepare budget, obtain approval, execute, control, evaluate and report budget variances.

Provide authoritative specialist advice to Senior and Executive Management teams to enable the implementation

of the IT Security strategy, policy, projects and change initiatives.

Engagement with senior management and the board on cybersecurity strategy design and implementation.

Deployment of Cyber security solutions as required within the Enterprise across cloud and on-prem infrastructure.

Development and communication of Security Baselines for Cloud Security, Active Directory, Operating Systems,
Databases, Networks to Technology teams using CIS Standards and NIST Frameworks.

Design, Development and Management of Vulnerability management program.

Management of vulnerabilities on all endpoints and business applications to prevent financial losses from cyber
security breaches and reduced risk to an acceptable threshold as determined by management.

Manage all Security compliance requirements that are part of ISO 20000, ISO27000, PCI DSS and Data
Privacy standards.

Provision of Cybersecurity Advisory on all new products and projects within the organization and
recommending proven architectures and solutions to support the business.

Management of endpoint security solutions on servers and workstations.

Periodic Penetration testing of all business applications and coordination of phishing campaigns.

findings.

Development of business-relevant metrics to measure the efficiency and effectiveness of the programs,
facilitate appropriate resource allocation and enhance the maturity of the security and compliance program.

Conducted risk assessments using established frameworks such as OWASP top ten and the NIST
frameworks and recommending appropriate controls to mitigate identified risks.

Develop and manage the information security training program for employees within the Exchange.

Evaluate potential risks to The
countermeasures to address those risks.