To safeguard the confidentiality, integrity and availability of information/data handled by ZB Financial Holdings Information Technology systems, and also to ensure that there is business continuity in the event of a disaster .Ensures compliance and support of SWIFT setup.Formulates an IT Security Policy for the Group and constantly reviews it to match best practice in the industry.Trains users and ensures they are aware of the Group IT Security Policy and other related policies so as to foster a good and safe computing culture in the Group .Provides IT Security advisory to IT related committees and Boards.Plans and coordinates Group IT Ehancement Committee meetings.Conducts IT Risk assessments and reporting for the Group .Participates in all IT Projects and ensures IT security issues are part of any system requirements and that the delivered systems meet the minimum security requirements .Ensures all IT systems implement segregation of duty principles.Researches on latest IT security standards and recommends for implementation in the Group and participates in the implementation programmes ie ISO 27001/2, PCI DSS etc.Provides the required information for audits and RBZ inspections as well as management comments for the reports Ensures recommendations are implemented.Monitors usage of IT systems for compliance through logs and report reviews.Participates in tender adjudication in the procurement of IT systems and related technology.Ensures an independent organisation is engaged to perform the test and IT Security assessment on an annual basis Ensures reported weaknesses/vulnerabilities are fixed  .Formulates an IT Security Policy for the Group and constantly review it to match best practice in the industry. Performs any other duties as assigned by superior.Decides on how to execute duties as a Swift Security Officer.Decides what management comments to write in an Audit report.Decides on which systems and areas to monitor for compliance.Decides on how to resolve any security issue reported on systems Decides on what risk items to report on after an assessment ie Group IT Quarterly Risk Assessment Board Report.Submits quarterly Risk Board Report for Group IT.Conducts user awareness training workshops and circulars - quarterly and as and when required Plans for own training and workshops both internal and external.Ensures the Group has at least one DRP simulation per year and documents results for inspection by the regulator or Assurance teams.Ensures policies are updated as and when significant changes have taken place in the operating environment or as per best practice requirement.Plans for IT areas, systems and logs to be reviewed ie daily, monthly and quarterly .Plans for participation in on-going IT Projects, this might be very hectic given that we have many projects running at the same time.Monitors other areas for compliance issues ie license renewals and management. Prepares and presents for Group Business Risk's annual budget and other general administration tasks for Group Business Risk.Ensuring compliance by users to the general IT Security Policy.Ensuring settings compliance for IT systems already in use in the Group.Review of logs for all systems in use in the Group.Activating audit trail on Bank Fusion system in the given environment ie equipment and configuration.

Job evaluation subgrade: C