JOB DESCRIPTION
Based in Zimbabwe-Harare
The Ministry of Health and Child Care (MoHCC) of Zimbabwe and one of its key technical assistance partners, Vital Wave, are looking for an information security analyst with demonstrated experience in IT security, database, and network management to join a team that will be providing technical assistance to an existing software development team. This role is part of an initiative in which Vital Wave will provide targeted technical assistance (TA) to the Ministry of Health and Child Care (MoHCC) in Zimbabwe to build a strong foundation for interoperable health information systems (HIS), support the government’s unified vision for near real-time, patient-level data, and improve health services for critical programs including HIV/AIDS through its Impilo Electronic Health Records (EHR) system.
The individual would join an existing project team and work under the direction of Vital Wave and the MoHCC. This role will work collaboratively with software development team members to routinely monitor, investigate, and address potential security vulnerabilities in health information systems, as well as writing technical and process documentation.
Responsibilities:
- Enable encryption of the event stream
- Develop security guidelines and standard operating procedures to maintain secure development environment, management of credentials, auditing of logins and data access
- Assess security measures of national data center host environment
- Develop SOPs for Development Operations security (e.g., secure servers, private networks, data transmission, user access, and auditing)
- Enable encryption at rest and in transmission for all database transmissions
- Institute secure access management protocols for databases
Qualifications:
- Bachelor’s degree in computer science or related field.
- Experience in information security or related fields.
- Experience with computer network penetration testing and techniques.
- Experience managing databases and network infrastructure.
- Understanding of data encryption techniques, firewalls, proxies, and antivirus.
- Ability to identify and mitigate network vulnerabilities and explain how to avoid them.
- Understanding of patch management with the ability to deploy patches in a timely manner while understanding business impact.
- Experience working with and ensuring confidentiality of personal identifiable information (PII) and protected health information (PHI)
- Ability to participate in calls and meetings outside of regular business hours (e.g., in the evening CAT)
- Possession of the below certifications will be an added advantage
- Certified Information Systems Security Professions (CISSP) Certified Information Security Manager (CISM)
- Certified Ethical Hacker (CEH)
Job Summary
More Information
- Job Application Details Interested candidates should submit their CVs to [email protected] with the title “Information Security Analyst ” in the subject line of the email. Only short-listed candidates will be contacted. Deadline: 24 November 2021