Incident Recovery & Remediation Officer

SUMMARY:
Gijima Staffing Solutions is responding to a tender: We are seeking a Incident Recovery & Remediation Officer who  will be responsible for managing the recovery and remediation processes following security incidents at the company. This role plays a critical part in restoring normal operations, ensuring the integrity of IT systems, and implementing preventive measures to mitigate future risks. The officer will work closely with the incident response team to analyze incidents and coordinate recovery efforts.

POSITION INFO:
Key Responsibilities

• Incident Recovery Management
• Lead the recovery process for IT systems affected by security incidents, ensuring minimal disruption to university operations.
• Collaborate with IT teams to restore systems, applications, and data to a secure and operational state.
• Develop and execute recovery plans based on the nature of the incident, prioritizing critical systems and data.
• Remediation Strategies
• Assess the impact of security incidents and identify vulnerabilities that contributed to the incident.
• Work with relevant teams to implement remediation measures to address identified vulnerabilities and prevent recurrence.
• Document remediation actions taken and track progress against established recovery and remediation plans.
• Incident Analysis and Reporting
• Analyze incidents post-recovery to identify lessons learned and areas for improvement in incident response procedures.
• Prepare detailed reports on recovery efforts, including timelines, outcomes, and recommendations for future improvements.
• Present findings to management and stakeholders, ensuring transparency and accountability in the recovery process.
• Collaboration & Communication
• Collaborate with cross-functional teams, including IT, cybersecurity, and university administration, to coordinate recovery efforts.
• Maintain clear communication with stakeholders throughout the recovery process, providing updates on progress and any challenges encountered.
• Serve as a point of contact for inquiries related to incident recovery and remediation.
• Policy Compliance & Documentation
• Ensure all recovery and remediation activities comply with university policies and relevant legal and regulatory requirements.
• Maintain comprehensive documentation of incident recovery processes, remediation actions, and lessons learned for future reference.
• Contribute to the development and revision of incident recovery and remediation policies and procedures.
• Training & Awareness
• Assist in developing training materials and conducting training sessions on recovery and remediation best practices for IT staff.
• Promote awareness of incident recovery processes within the university community, encouraging adherence to security protocols.
• Participate in drills and simulations to test the effectiveness of incident recovery plans.

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• 2-4 years of experience in incident recovery, IT operations, or a related cybersecurity field.
• Familiarity with IT service management frameworks (e.g., ITIL) and incident recovery best practices.
• Understanding of cybersecurity principles and risk management strategies.

• Strong problem-solving skills and the ability to think critically under pressure.
• Excellent organizational skills with the ability to manage multiple recovery efforts simultaneously.
• Effective communication skills, both written and verbal, to engage with technical and non-technical stakeholders.
• Detail-oriented and committed to maintaining high standards in recovery processes and documentation.
• Ability to work collaboratively in a team-oriented environment and foster positive working relationships.

• Industry-recognized certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or similar are preferred.
• Experience with incident response tools and technologies is advantageous.
• Willingness to work flexible hours as needed to support incident recovery efforts.

• 1-year fixed-term contract, with the possibility of extension based on performance and project needs.

NB! This job is now closed. You can apply for other jobs by uploading your CV.