Cyber Security Specialist (MIS/IT 7)

JOB PURPOSE

Under the strategic direction of the Senior Director, Information, Communications and Technology, the Cybersecurity Specialist leads the Ministry’s cybersecurity programme, ensuring the protection of all digital assets, systems, and infrastructure. The role is responsible for policy development, strategic planning, governance, risk management, and national cybersecurity coordination, ensuring alignment with legislative requirements such as the Data Protection Act and international best practices. 

KEY OUTPUTS

• Enterprise-wide cybersecurity strategy implemented and continuously improved Full compliance with national cybersecurity and data protection regulations
• Mature incident response and threat intelligence capability 
• Cyber risk posture continuously assessed and reduced 
• Quarterly cybersecurity reports to Senior Leadership 
• Effective coordination with national cybersecurity bodies (e.g., JaCIRT, NSOC, MOCA) 
• Security awareness culture embedded across the Ministry 

KEY RESPONSIBILITY AREAS

Management/Administrative Responsibilities 

• Provides strategic leadership and direction for cybersecurity 
• Develops and oversee cybersecurity policies, frameworks, and standards
• Leads cybersecurity risk management and governance processes 
• Advises executive leadership on cyber risks and mitigation strategies
• Represents the Ministry at national and international cybersecurity forums
• Oversees budget planning and cybersecurity investments 

Technical/Professional Responsibilities 

• Oversees security architecture, engineering, and incident response functions
• Ensures implementation of enterprise security controls and monitoring systems
• Directs incident response, investigations, and reporting 
• Oversees vulnerability management and threat intelligence programs
• Ensures secure system design and compliance with standards 
• Evaluates emerging threats and technologies 

Human Resource Management Responsibilities 

• Provides leadership, guidance, and supervision to direct reports 
• Monitors and evaluates staff performance and conducts performance appraisals
• Recommends and supports recruitment, training, and development of staff
• Promotes a culture of accountability, teamwork, and high performance
• Ensures staff are adequately resourced to perform their functions effectively
• Builds institutional cybersecurity capacity 
• Recommends leave, disciplinary action, and staffing arrangements as required 

PERFORMANCE STANDARDS

• Cybersecurity strategy is developed, implemented, and periodically reviewed in alignment with organizational objectives. 
• Policies, standards, and procedures are established, communicated, and updated within required timeframes. 
• All applicable cybersecurity and data protection requirements are complied with, and audit issues are resolved within stipulated timelines. 
• Security incidents are promptly detected, effectively managed, and reported accurately within established timelines. 
• Cybersecurity risks are identified, assessed, and mitigated in a timely and structured manner. 
• Security controls are implemented and monitored to safeguard systems and data, and vulnerabilities are addressed within defined timeframes. 
• Reports are accurate, clear, and submitted within stipulated timelines. 
• Effective collaboration is maintained with relevant stakeholders and national cybersecurity bodies, with information shared as required. 
• Security awareness activities are implemented and contribute to improved staff compliance with security practices. 

REQUIRED COMPETENCIES

Core 

• Oral communication 
• Written communication
• Customer and quality focus
• Team work and cooperation
• Interpersonal skills 
• Compliance 
• Integrity 
• Leadership 
• Initiative 
• Planning and organizing 
• Adaptability 

Functional 

• Information Technology Security and Risk Management
• ICT Corporate Governance 
• ICT Project Management 
• Information Technology & Strategic Sourcing 
• Analytical thinking 
• Goal/result oriented 
• Managing external relationships 
• Problem solving and decision making 

MINIMUM REQUIRED EDUCATION AND EXPERIENCE

• Bachelor’s Degree in Cybersecurity, IT, or related field (Master’s preferred)
• Minimum 7–10 years’ experience, with at least 3 years in leadership
• Certifications: CISSP, CISM, C|EH or equivalent (required) 

SPECIAL CONDITIONS ASSOCIATED WITH THE JOB

• Normal office conditions 
• May be required to work beyond normal working hours;