ICT Security Officer (MIS/IT 6)

JOB PURPOSE

Under the leadership and direction of the Director, ICT, the ICT Security Officer is chiefly responsible for leading the development, implementation and monitoring of ICT Security strategy, frameworks, policies and guidelines ensuring that the Ministry of Health and Wellness and its subjects successfully manages its compliance and obligations under the GOJ ICT Policies, Standards and Guidelines 2018.

The incumbent will also maintain the security of all the networks and systems of the ministry and participate in the effective planning, development and implementation of policy related to the protection of the government of Jamaica’s (GOJ) Information Technology (IT) infrastructure. The Information Cyber Security Officer is also expected to provide technical response and investigation capabilities in support of the Ministry.

KEY OUTPUTS:

• Cyber security systems and measures development, implemented and maintain
• Cyber security IT Standards established
• ICT Security risks mitigated
• Cyber security strategies managed
• Security Analysis performed
• ICT Infrastructure and Application Audited
• ICT Security breaches reported and investigated
• Technical advice and interpretation provided 
• Technical reports provided
• Annual/Quarterly/Monthly performance report prepared
• Individual work plans developed
• Staff coaches and appraisals conducted

Key Responsibility Areas

Management/Administrative Responsibilities:

• Plans, executes, assesses and monitors all tasks assigned;
• Produces periodic or ad-hoc reports of high quality for every incident, security threat and vulnerability
• Implements cyber security strategy and policies;
• Provides technical advice in support of the GOJ cyber security policy, strategy, guidelines, standards and best practices;
• Assists with the development of standard operating procedures for handling future types of cyber incidents by GOJ Ministries, Department and Agencies (MDAs) such as guidelines and protocols for the conduct of GOJ’s staff;

Technical Responsibilities

• Researches and keep track of the latest information security trends and methodologies and seeks opportunities to apply best practices;
• Leads the design, implementation and maintenance of the organization’s cyber-security plan, strategy, protocols and schedule;
• Monitors the schedule for reviewing the organization’s networks for security breaches and assigns tasking as a result of the review;
• Assesses current technology architecture for vulnerabilities, weaknesses and possible upgrades or improvement;
• Develops and delivers Information Systems security  policies and standards, best practices, architecture and systems to ensure information systems security across the enterprise;
• Oversees the implementation of procedures and methods for auditing and addressing noncompliance to information security standards;
• Reviews outcome of security assessments and direct remedial and mitigation strategies;
• Monitors the installation and use of security tools (e.g., firewalls, data encryption) to protect sensitive information;
• Provides periodic information security awareness training to organization personnel;
• Supports the process to align IT Security with business strategy;
• Oversees technological upgrades, improvements and major changes to the information security environment;
• Serves as a focal point for the ICT team and the customer or organizations on matters of Cyber Security;
• Manages the workflow and throughput  of the team with regard to digital forensic examinations in relations to resource availability and promise dates provided to the internal or external customers;
• May be directly involved in the forensic examination of electronic devices and serve as expert witness as the need arise.

Minimum Required Education and Experience

• A Bachelor’s degree in Software Design, Computing, Computer Science, ITC, Management Information Systems, Computer engineering, or a related discipline;
• Certified Information Security Manager (CISM) certification or Certified Information Systems Security Professional (CISSP) or related ICT security certification;
• Minimum of three (3) years experience in Cyber Security or Network Administration roles;

Kindly submit a cover letter and resume along with the names, telephone numbers, and email addresses of two (2) references, one of whom must be a former or current supervisor.

The Ministry of Health & Wellness thanks all applicants for their interest; however, please note that only short-listed candidates will be contacted.