ABOUT THE ROLE

Based in the Head Office, Port Moresby and reporting to the Chief Information Officer, the IT Security Manager is responsible for developing, implementing, and maintaining the organization's information security strategy, policies, standards, and controls to protect business information assets, systems, networks, and customer data. The role ensures compliance with regulatory requirements, manages cybersecurity risks, responds to security incidents, and promotes a strong security culture across the company.

KEY RESPONSIBILITIES

• Develop and maintain the Information Security Framework, governance processes, and reporting to ensure compliance, effective risk management, and alignment with business objectives.
• Oversee cybersecurity operations, including security monitoring & incident management, vulnerability management, security tools, and regular security assessments to maintain a strong security posture.
• Coordinate cybersecurity risk management and compliance activities, including risk assessments, regulatory compliance, audits, and remediation of security findings.
• Oversee vulnerability management, including VAPT, remediation, patching, system hardening, and security configuration reviews.
• Ensure infrastructure and network security across on-premises and cloud environments are secure.
• Oversee identity and access management, including user access controls, privileged access, authentication, authorization, and access reviews.
• Develop and deliver cybersecurity awareness and training programs to promote security best practices and a strong security culture across the organisation.
• Oversee third-party security risk management, including vendor due diligence, security assessments, and contractual security requirements.
• Support business continuity and disaster recovery by maintaining and testing recovery capabilities, backup security, and cyber resilience measures.

REQUIREMENTS

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related discipline, a Master’s degree is an advantage.
• At least 7 years of work experience in ICT with at least 3 years specifically within information security or cybersecurity management.
• Experience in banking, financial services, fintech, or another regulated industry is preferred.
• Proven experience managing security incidents, ransomware recovery, and enterprise security technologies.
• Experience managing VAPT engagements and audit remediation programs.
• Demonstrated expertise in cybersecurity operations.
• Strong knowledge of cybersecurity risk and compliance frameworks, business continuity, and disaster recovery planning.
• Relevant professional cybersecurity certifications such as CISSP, CISM, CEH, ISO 27001 Lead Implementer/Auditor, CompTIA Security+, or equivalent Microsoft, Azure, or AWS security certifications.

HOW TO APPLY

If you are passionate about pursuing a career with Moni Plus and enjoy being part of a high-performing support team, we’d love to hear from you. We offer competitive compensation and benefits, including health insurance, and professional development opportunities.

Please submit your resume and a cover letter outlining your relevant experience and why you are the ideal candidate for this position.

Address your application to:

Head of Human Capital, Moni Plus, PO Box 1748, Boroko, NCD via email [email protected] and apply now.

Applications close Friday, 30 October 2026. Please note, only shortlisted applicants will be contacted to proceed.