​

1. Information Security Management

• Develop, implement, and enforce IT security policies, standards, and procedures.

• Monitor and assess system vulnerabilities and apply patches and updates as required.

• Conduct regular risk assessments, penetration testing, and security audits.

2. Mobile Application Security

• Oversee security testing for in-house and third-party mobile applications (Android and iOS).

• Promote secure coding practices and conduct application vulnerability scanning.

• Coordinate remediation of identified vulnerabilities with internal and external development teams.

3. Incident Response and Monitoring

• Lead security incident response activities, including detection, containment, eradication, and post-incident reviews.

• Monitor security alerts, investigate incidents, and coordinate responses across endpoints, servers, and user accounts.

4. Network and Systems Protection

• Manage and maintain firewalls, intrusion detection and prevention systems (IDPS), and endpoint protection solutions.

• Ensure secure configuration and hardening of servers, databases, and applications.

• Respond to and mitigate cybersecurity incidents, breaches, or attempted attacks.

5. Data Protection and Compliance

• Ensure compliance with data protection laws, organizational policies, and donor requirements.

• Implement and maintain encryption, backup, and disaster recovery protocols.

• Conduct staff training on data privacy, cybersecurity awareness, and safe IT practices.

6. Monitoring, Reporting, and Audit Support

• Maintain detailed logs of security events and generate regular security reports.

• Provide management with updates on emerging threats, risks, and mitigation strategies.

• Support internal and external audits by providing accurate security documentation and evidence.

7. Collaboration and Capacity Building

• Work closely with IT, operations, and program teams to integrate security into systems and projects.

• Provide technical guidance and cybersecurity training to staff.

• Liaise with external vendors, service providers, and partners on security tools and solutions.