{"id":3252391,"url":"https://alion.io/job/asa-microfinance-information-security-officer","title":"Information Security Officer","company":{"id":4473998,"name":"ASA Microfinance","domain":null,"url":"https://alion.io/company/asa-microfinance","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Lusaka, Zambia"],"countries":["ZM"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"SIEM","optional":false},{"name":"IAM","optional":true},{"name":"ISO 27001","optional":true}],"status":"live","first_seen_at":"2026-10-25T19:09:56Z","employer_posted_date":null,"last_verified_at":"2026-10-25T19:09:56Z","board_verified":false,"closed_at":null,"days_open":2,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":2},"description":"Job Title: Information Security Officer \nReporting Line: Head Risk & Compliance\nMain Purpose of the Job\nThe main purpose of the role is to be accountable for implementing and operationalizing ASA Zambia’s information security controls, coordinating security operations activities (monitoring, vulnerability management, incident response), supporting audits and regulatory engagements, and driving a measurable security posture across head office and branches—aligned to ASA International Group baselines and legal/regulatory requirements. \nKey Responsibilities\n· Implement information security policies, standards and minimum baselines, including procedures and Standard Operating Procedures for core security processes.\n· Maintain an exception/risk acceptance workflow for deviations from baseline, ensuring approvals, compensating controls, and expiry tracking.\n· Conduct periodic security risk assessments (including branch coverage) and maintain the information security risk register.\n· Produce information security KRIs/KPIs and dashboards and provide standardized reporting inputs through Head Risk and Compliance towards the Group-led initiatives and reporting.\n· Coordinate Security Operations Center (SOC)/Security Information and Event Management (SIEM) onboarding and monitoring requirements with the Group SOC capability; ensure log sources, alert tuning inputs, and local response readiness.\n· Lead local incident triage and coordination: containment, evidence preservation, root cause analysis, remediation tracking, post-incident reporting\n· Manage the vulnerability lifecycle: scanning coordination, risk-weighted prioritization, remediation tracking, validation, and reporting (including audit evidence).\n· Oversee periodic user access reviews against approved access matrices; track gaps and closures.\n· Support and implement Group privileged access principles locally.\n· Participate in vendor due diligence and third-party security reviews, ensuring contracts and service arrangements meet ASA requirements.\n· Track third-party remediation actions and maintain evidence for audits and regulators.\n· Support testing and maintenance of disaster recovery and business continuity security requirements (e.g., resilience controls, recovery testing evidence)\n· Execute information security awareness programs for staff and branches; deliver targeted training for high-risk roles.\nKey Performance Measures\nStakeholders:\n· Engagements with internal business functions.\n· Engagements with regulators which include the Data Protection Commission.\nEmployees:\n· Effective engagement with all staff\n· Employee development through information security awareness programs\n· Risk Management:\n· Implementation of IT Risk Control Self-Assessment.\nCompliance and Reporting:\n· Monthly reports submitted to Head Risk & Compliance. \n· Existence of adequate cyber-security controls and measures.\nStrategy:\n· Aligning information security goals with broader organizational objectives. \nKey Skills, Knowledge, Experience and Core Competencies\nSkills: \n· Excellent analytical, problem-solving, and communication skills.\n· Strong organizational and project management skills\n· Good communication skills.\n· Good decision-making, problem-solving, and presentation skills.\nKnowledge:\n· SIEM/logging concepts and alert triage\n· Vulnerability management and patch governance\n· Endpoint and network security controls (EDR/AV, firewalls, segmentation concepts)\n· Identity and access management, access review execution, privileged access governance concepts\n· Disaster Recovery/Business Continuity Plan testing support and evidence readiness\n· Strong knowledge and understanding of the Bank of Zambia cyber security risk directives.\nExperience and Qualifications: \n· Bachelor’s degree in information technology, Computer Science, Information Systems, or equivalent.\n· Desirable certifications: CISA / CISM / CISSP / ISO 27001 LI/LA / Security+ / CEH \n· 5 to 8 years’ experience in IT / Security, with 3–5 years in an information security / IT risk / security operations role.\n· Demonstrated experience in at least three of: security operations, incident response, vulnerability management, IAM/access reviews, endpoint security, network security controls, audit/compliance evidence management.\n· Exposure in the financial services sector highly preferred.\nCore Competencies:\n· Capabilities to develop policies and standard operating procedures.\n· Ability to collaborate with stakeholders at all levels.\n· Ability to work in an entrepreneurial, multicultural, multidisciplinary team and deliver high-quality work within deadlines to meet objectives.\n· High proficiency level in verbal and written English\nImportant Relationships\n· Foster strong relationships with Departmental Heads and functional heads. \n· Foster good working relationships with regulatory bodies such as the Bank of Zambia.\nProblem Solving, Planning and Decision Making\nProblem Solving: \n· Ability to proactively identify and resolve risks associated with information security.\nPlanning: \n· Ability to develop action plans and methodologies to manage information security risks. \n· Ability to organize work in order of importance and priority. \nDecision Making:\n· Ability to provide objective guidance without undue influence.\nApplication Deadline: 30th October 2026\nPlease Note: Only complete applications (cover letter and resume in a single document) will be considered, and only shortlisted candidates will be contacted.\n We stand for diversity and inclusion. Therefore, we warmly encourage everyone to apply, regardless of gender, background, ethnicity, age, religion, etc.\n“ASA Microfinance Zambia limited aims to attract and select a diverse workforce, ensuring equal opportunity to everyone, irrespective race, age, gender, class ethnicity, disability, location, and religion. Qualified women are particularly encouraged to apply”.","description_format":"text","description_chars":5893,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security"],"lifecycle":[{"event":"open","at":"2026-10-25T22:38:30Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":2,"expected_fill_days":23,"reasons":["seen:2","win:early"],"computed_at":"2026-10-28T05:59:10Z"},"pay":null,"html_url":"https://alion.io/job/asa-microfinance-information-security-officer","json_url":"https://alion.io/job/asa-microfinance-information-security-officer.json","meta":{"generated_at":"2026-10-28T11:59:59Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15837,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-29T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4473998},"rest":"https://alion.io/mcp/rest/get_company?id=4473998"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fasa-microfinance-information-security-officer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fasa-microfinance-information-security-officer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fasa-microfinance-information-security-officer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/asa-microfinance-information-security-officer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fasa-microfinance-information-security-officer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3252391}},{"tool":"search_jobs","arguments":{"company":4473998,"detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3252391},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}