Position Overview

The Position is Open for Liberia Residents only

The role spans security governance, secure design review, vulnerability management, security monitoring and incident response, and compliance with data protection and government security requirements

Scope of Work

Security Architecture and Governance

Develop and maintain a security architecture, policies, standards and procedures aligned to ISO/IEC 27001 and relevant government requirements.
Conduct risk assessments and maintain a risk register with treatment plans across applications, infrastructure and third-party integrations.
Define identity and access management standards, including role-based access control, multi-factor authentication and privileged access management.
Advise on data protection, data classification, encryption (at rest and in transit) and sovereign data management requirements.
Secure Development and Assurance

Embed security into the development lifecycle: secure design reviews, threat modelling, secure code review support and pre-release security testing.
Plan and perform vulnerability assessments and coordinate independent penetration tests; track remediation to closure.
Harden servers, networks, databases and hosting platforms in coordination with the Infrastructure Engineer.
Review and secure agency integrations, APIs and the unified payment capability against fraud and abuse.
Security Operations and Incident Response

Implement and operate security monitoring and logging (SIEM), ensuring full auditability of user and administrator actions.
Develop and maintain the incident response plan; lead detection, containment, investigation and post-incident reviews.
Monitor threat intelligence relevant to government digital services and adjust controls accordingly.
Conduct security awareness training for project, and client staff.
Reporting and Compliance

Prepare periodic security posture, vulnerability and incident reports for project leadership and the client.
Support audits, compliance reviews and certification activities as required.
Perform any other tasks assigned from time to time.
Qualifications, Certifications and Experience

Bachelor of Science in Computer Science, Cybersecurity, Information Technology or a related field. A Master's degree is an added advantage.
Minimum seven (7) years' experience in information security, including at least three (3) years securing large-scale web platforms, e-government, banking or payment systems.
Required certifications (at least one): CISSP (Certified Information Systems Security Professional) or CISM (Certified Information Security Manager).
Added-advantage certifications: CEH (Certified Ethical Hacker), OSCP, ISO/IEC 27001 Lead Implementer or Lead Auditor, CompTIA Security+, CCNP Security, and cloud security certifications (CCSP, AZ-500, AWS Security Specialty).
Hands-on experience with SIEM platforms, vulnerability scanners, firewalls, IDS/IPS, endpoint protection and PKI/encryption technologies.
Strong knowledge of OWASP Top 10, secure SDLC practices, and network and infrastructure security.
Working knowledge of data protection legislation and government security frameworks; experience with public sector or donor-funded programmes is an added advantage.
Experience conducting risk assessments, coordinating penetration tests and leading incident response.
Personal Attributes

High integrity, discretion and sound judgement in handling sensitive information.
Strong analytical and investigative skills.
Ability to communicate security risks clearly to technical and non-technical stakeholders.
Ability to work independently and within a multidisciplinary team.
Willingness to be based in Monrovia and travel as required.

Interested candidates should submit their CV and a brief cover letter to the Farsight HR email with the subject line: “Cybersecurity Expert”. Applications will be reviewed on a rolling basis until the position is filled.