Job Title: Information Security Manager

Employment Type: Full-Time

Department: Risk & Compliance

Reports to: Senior Manager Risk & Compliance

About RSwitch

Established in 2003, RSwitch operates the national e-payment switch in Rwanda. It primarily offers card issuance and management services through its flagship product, SmartCash and Third Part Processor services. RSwitch is PCI DSS, PTS certified and currently operates and manages the eKash scheme, an interoperable mobile instant payments Switch (Rwanda National Digital Payments System-RNDPS)

Position Overview

RSwitch is looking for a looking for an experienced Information Security Manager to oversee and manage the organization’s information cybersecurity and risk management strategies. The ideal candidate will have a strong understanding of security frameworks, risk assessment, compliance standards, and a proven track record in handling security incidents, with a specific focus on managing Vulnerability Assessment and Penetration Testing (VAPT) cycles.

Responsibilities:

• Develop, implement, and maintain an enterprise-wide information security and cyber risk management strategy.
• Manage Vulnerability Assessment and Penetration Testing (VAPT) on a periodic basis to identify and mitigate security vulnerabilities.
• Oversee the Security Operations Center (SOC) to monitor security events and ensure proactive detection of threats.
• Interpret logs and alerts from various security systems (e.g., SIEM, firewalls, intrusion detection systems and prevention detection systems) and respond to potential threats.
• Ensure compliance with relevant regulations and industry standards (e.g., PCI Certifications, ISO certifications, GDPR).
• Collaborate with IT, compliance, and other departments to develop risk mitigation strategies.
• Lead the development and implementation of security policies, standards, and procedures.
• Manage the response to security incidents and breaches, ensuring proper investigation and reporting.
• Oversee security awareness programs for employees to mitigate human risk factors.
• Work with vendors and partners to ensure third-party compliance with the organization’s security standards.
• Maintain and enhance the business continuity and disaster recovery plans related to cyber risk.
• Provide regular reports to senior management on the state of the organization’s cyber risks, including the results of VAPT scans and SOC insights.

Qualifications:

• Bachelor’s degree in information technology, computer science, cybersecurity, or related field
• Professional certifications such as CRISC, CISA, CISM, or equivalent is an added advantage
• Minimum 5 years of experience in information security, risk management, or related roles.
• Strong knowledge of security frameworks such as ISO 27001, NIST, and COBIT.
• Experience in managing periodic VAPT scans, SOC operations, and analyzing security data from various systems.
• Hands-on experience in managing incidents, security audits, and compliance programs.
• Experience with data protection techniques.
• Excellent communication skills, with the ability to explain complex security topics to non-technical stakeholders.

HOW TO APPLY:

• Interested candidates should submit their letter of intent and CV by e-mail to: recruitment@rswitch.co.rw   no later than Friday 11^th September 2026   11:59 PM
• Please note that applications received after the closing date will not be considered.
• Only Short-listed candidates will be contacted.