IT Information Security Systems Supervisor

SGS Technologies has more than 15 years' experience in the conception, design, implementation and operation of Customs management systems, online information delivery, tools for the production and distribution of international trade statistics, online payment solutions and integration with other systems.

SGS Technologies representing by Mozambique, Ltd., afilliate (Société Générale de Surveillance) we are the world’s leading testing, inspection and certification company.We are recognized as the global benchmark for sustainability, quality and integrity. Our 98,000 employees operate a network of 2,650 offices and laboratories, working together to enable a better, safer and more interconnected world.

We are looking for (1) Information and Security Systems Supervisor reporting to Systems & Network

Manager, under the terms of reference below.

For more information's, please visit the following websites:

Moçambique MCNet & About SGS | SGS

The Information and Security Systems Supervisor is responsible for overseeing the institution’s information security and cybersecurity posture, as well as the management of physical security systems and technologies, ensuring the protection of information assets, IT infrastructure, and facilities.

The incumbent works closely with the Network and Systems Supervisors to ensure secure and resilient IT operations, while supporting the IT Manager in managing security risks, strengthening operational resilience, and ensuring compliance with applicable regulatory requirements and international security standards and frameworks.

Responsabilities

Security Governance & Compliance

• Develop, implement, and maintain policies, standards, and procedures covering information security, cybersecurity, and physical security systems.
• Ensure compliance with applicable regulatory requirements and relevant international standards and frameworks, including ISO 27001 and the NIST Cybersecurity Framework (NIST CSF).
• Coordinate and support internal and external audits related to information security, cybersecurity, and physical security systems.
• Maintain accurate and up-to-date security documentation, including risk registers, incident records, security-related asset inventories, and other required records.

Cybersecurity Operations

• Oversee day-to-day security monitoring, threat detection, vulnerability management, and security incident handling.
• Manage and monitor cybersecurity tools and controls, including firewalls, Security Information and Event Management (SIEM), endpoint protection, Intrusion Detection and Prevention Systems (IDS/IPS), and identity and access management systems.
• Lead cybersecurity incident response activities and coordinate investigation, containment, remediation, and follow-up actions with relevant teams.
• Ensure secure configuration, timely patching, and appropriate hardening of systems, networks, and security infrastructure.

Physical Security Systems Management

• Oversee the operation, maintenance, availability, and security of CCTV, access control, alarm, fire detection, and other electronic physical security systems.
• Ensure secure configuration and appropriate integration of physical security systems with the IT infrastructure.
• Coordinate with Facilities and Security teams to ensure alignment of security systems, operational practices, and incident response procedures.
• Manage and periodically review user access rights, system logs, configurations, and monitoring tools associated with physical security platforms.

Risk Management

• Conduct and support security risk assessments covering information systems, IT infrastructure, and physical security technologies.
• Identify vulnerabilities and security risks, assess their potential impact, and recommend appropriate mitigation measures.
• Monitor identified security risks and follow up on agreed mitigation and corrective actions.
• Support business continuity and disaster recovery planning, testing, and improvement from an information and systems security perspective.

Collaboration & Technical Leadership

• Work closely with the Network and Systems Supervisors to ensure secure architecture, configuration, and operational practices.
• Provide technical guidance on secure system design, access controls, infrastructure changes, and the implementation of security requirements.
• Participate in IT and facilities-related projects to ensure that security requirements and controls are incorporated from the design and planning stages.
• Provide security input into the evaluation and implementation of new technologies, systems, and infrastructure changes.

Security Awareness & Capacity Building

• Lead and support security awareness initiatives for employees and contractors.
• Provide training and technical guidance to IT and relevant security personnel on secure practices, security controls, and emerging threats.
• Promote a culture of security awareness, accountability, and continuous improvement across the organization.

• Honor Degree in information security, Computer Science, Information Systems, Electronics, or related field.
• CISSP, CISM, CEH, CompTIA Security.
• ISO 27001 Lead Implementer/Auditor.
• Certifications related to physical security systems (e.g., CCTV, access control platforms) are an advantage.

Experience

• Minimum of 5 years of experience in IT security, systems administration, network security, or security systems management.
• Experience supervising or coordinating technical teams is an advantage.
• Proven experience with cybersecurity tools and physical security technologies.

Competencies

• Proficiency in Portuguese and English.
• Strong analytical and problem-solving.
• Strong understanding of cybersecurity principles and physical security technologies.
• Knowledge of regulatory and compliance frameworks.
• Analytical and problem-solving skills.
• Ability to lead cross functional teams and manage complex security issues.
• Excellent communication and documentation skills.
• High ethical standards and commitment to confidentiality.