Head of Internal Audit & Cyber Security

Overview

We are recruiting!

Our client in Lusaka Zambia is looking for a Head of Internal Audit & Security to join their team for a job vacancy within the Hospitality Services industry.

To apply or for more information follow the link below.

Job Summary:

The Head of Internal Audit & Cyber security will be responsible for overseeing and managing the internal audit and Security functions. This role will ensure the efficient assessment of financial, operational, and IT controls, and will also be involved with developing and implementing of comprehensive security strategies, managing security teams, and ensuring the Company’s facilities, information, and operations are secure from both internal and external threats, addressing any potential risks related to data, property, systems, and processes.

Key Responsibilities:

Internal Audit:

• Lead and manage the internal audit function to assess and evaluate the Company’s risk management, control, and governance processes.
• Plan, execute, and manage risk-based internal audits across financial and operational functions.
• Prepare and present detailed reports of audit findings and recommendations to senior management and the audit committee.
• Collaborate with business units to develop and implement remediation plans based on audit findings.
• Ensure compliance with relevant laws, regulations, and internal policies.
• Provide strategic advice to senior management on improving internal controls and operational efficiency.

Security Function:

• Develop and implement a comprehensive security strategy to protect the Company’s physical and digital assets.
• Lead risk assessments to identify security vulnerabilities and propose or design effective mitigation strategies.
• Develop and oversee crisis management and incident response plan in case of security breaches.
• Provide regular security awareness training to staff and ensure they are kept informed of current security threats.
• Oversee the day-to-day operations of the security department, ensuring efficient and effective implementation of security protocols.
• Ensure the security of all physical assets, including facilities, equipment, and sensitive materials.
• Lead the development of access control policies and security monitoring programs for the Company’s facilities.
• Manage emergency response plans, including coordination with law enforcement, fire departments, and other emergency services.
• Work closely with the IT and cybersecurity teams to ensure the protection of digital systems, data, and networks from cyber threats.
• Support the development of IT security policies, risk assessments, and incident response strategies.
• Develop and maintain relationships with local law enforcement, government agencies, and security partners to ensure coordination and support when needed.
• Prepare and manage the security department’s budget, ensuring optimal use of resources.
• Investigate and report security incidents, breaches, and violations, and recommend corrective actions as necessary.

Leadership and Strategy:

• Develop and maintain the internal audit and security strategy to align with the company’s goals and objectives.
• Provide leadership to the internal audit and security teams, including training, mentoring, and career development.
• Establish and maintain relationships with internal stakeholders, external auditors, and regulatory bodies.
• Ensure that internal audit and security practices are aligned with best practices and the latest industry trends.
• Conduct regular security drills and exercises to ensure preparedness for various threat scenarios.
• Establish key performance indicators (KPIs) to measure the effectiveness of the security team and security initiatives.

Qualifications:

• Bachelor’s degree in Risk Management (Master’s preferred).
• 8+ years of experience in internal audit, security, or risk management, with at least 5 years in a leadership role.
• Strong understanding of audit methodologies, risk management frameworks, and security best practices.
• Strong knowledge of physical security systems, cybersecurity, risk management frameworks, and emergency response planning.
• Proven experience in managing a diverse security team and handling complex security operations.
• Excellent communication, leadership, and problem-solving skills.
• Proven experience in leading and managing audit and security teams.
• Strong communication, problem-solving, and interpersonal skills.
• Experience with auditing IT systems and understanding cybersecurity frameworks.

Key Skills:

• Risk Management
• Internal Controls
• Financial Auditing
• IT Audit & Security
• Security Operations Management
• Physical Security
• Cybersecurity
• Risk Assessment & Mitigation
• Emergency Response Planning
• Regulatory Compliance
• Strategic Planning
• Crisis Management