Job Description
Mega Market (Pvt) Ltd is inviting applications from suitably qualified, experienced, and highly motivated individuals to fill the position of Information Security Manager based at the Head Office in Mutare.
Job Purpose
The Information Security Manager will provide strategic leadership and operational oversight across cybersecurity operations, governance, compliance, security monitoring, incident response, and information security risk management. The role is responsible for ensuring the confidentiality, integrity, availability, and resilience of organisational information assets and operational systems while supporting secure digital transformation initiatives and compliance with regulatory and industry standards including ISO/IEC 27001 and the Cyber and Data Protection Act (Zimbabwe).

Duties and Responsibilities
Key Duties and Responsibilities
Reporting to the Head of IT, the successful candidates will be responsible for:
❖ Lead enterprise cybersecurity operations in collaboration with Managed SOC partners.
❖ Develop and implement information security policies, standards, and frameworks.
❖ Provide security guidance for ICT projects, system implementations, and digital transformation initiatives.
❖ Provide governance oversight for CCTV systems, access control platforms, and operational security technologies.
❖ Drive adoption of AI-assisted security tools and automation technologies.
❖ Improve alert triage, user behaviour monitoring, vulnerability analysis, and operational efficiency.
❖ Develop and implement cybersecurity awareness programs and phishing simulations.
❖ Prepare security reports and risk assessments for management.


Qualifications and Experience
Qualifications, Experience, and Personal Attributes
The ideal candidate must possess:
❖ Bachelor’s Degree in Cybersecurity, Information Security, Computer Science, Information Systems, ICT, or related field.
❖ Honours Degree or postgraduate qualification in Cybersecurity, Risk Management, or related discipline will be an added advantage.
❖ Mandatory (At Least One), CISM or CISSP.
❖ Preferred Certifications, ISO/IEC 27001 Lead Implementer or Lead Auditor, CRISC or CISA, Certified Data Protection Officer (DPO), Microsoft Security Certifications
❖ Minimum of 5 years’ experience in cybersecurity, information security, ICT risk management, or security operations.
❖ Proven experience in Security operations and incident response, vulnerability management, Security governance, audits, and compliance, Managed SOC environments
❖ Knowledge of Operational Technology (OT) security and FMCG/manufacturing environments will be an added advantage