Information Security Officer

Job Overview

FNB Lesotho seeks a qualified and experienced Information Security Officer to design, implement, and oversee comprehensive information-security frameworks for the bank’s technology ecosystem. The position ensures that all information assets remain secure, confidential, and compliant with regulatory standards by setting and enforcing policies, procedures, and technical safeguards.

Key Responsibilities

• Develop and maintain information-security policies, standards, and procedures aligned with the bank’s risk appetite and regulatory obligations.
• Implement strong security controls to prevent breaches, data loss, and unauthorized access.
• Conduct vulnerability assessments, penetration tests, and internal audits to ensure system integrity.
• Identify and address compliance gaps, ensuring adherence to all regional and international cybersecurity regulations.
• Manage user access, information-security roles, and network permissions across the enterprise.
• Lead the development and maintenance of a group-wide information-security programme to assess and mitigate risk.
• Monitor patch management and endpoint protection to reduce exposure to threats from outdated systems.
• Compile management reports on risk posture, incidents, and control effectiveness to support decision-making.

Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, or IT Risk Management.
• 4–5 years of relevant experience in an information-security or IT-governance environment.
• Master’s degree or Data-Privacy certification is an added advantage.
• Strong understanding of regulatory frameworks and cybersecurity standards.
• Excellent analytical, communication, and problem-solving skills.

Benefits

• Dynamic and collaborative work environment within a leading African banking group.
• Opportunities for professional growth, networking, and innovation.
• Exposure to regional cybersecurity governance within the FirstRand Group.
• Inclusive culture that values curiosity, courage, and continuous mastery.

Quick Details

• Salary Range: Market Competitive
• Job Sector: Banking / Information Security / Cyber Risk
• Job Type: Full-time (On-site)
• International Applicant: Considered within SADC region
• Qualifications: Degree in Cybersecurity or IT Risk Management; 4–5 years experience; advanced degree preferred
• Job Categories: Information Security, IT Governance, Risk Management, Banking Technology

Other job you might intrested: Apply Sentinel Maintainer Job at Raytheon in Djibouti