About the Role
Our client, a prominent player in the mining sector, is seeking an experienced and strategic Lead Information Security Manager to oversee their cybersecurity operations in Welkom, Free State. This senior leadership role requires a visionary individual to develop and execute a comprehensive information security strategy, ensuring the protection of the organization's critical assets, data, and operational technology (OT) environments. The Lead Information Security Manager will lead a team of security professionals, foster a security-conscious culture, and manage relationships with key stakeholders. This is a fantastic opportunity to make a significant impact in a complex and vital industry. We are looking for a leader with a proven ability to manage security risks, implement effective controls, and drive continuous improvement in cybersecurity resilience. The successful candidate will be responsible for strategic planning, operational oversight, and incident management at the highest level.
Key Responsibilities
- Develop, implement, and manage the organization's overall information security strategy and roadmap.
- Lead, mentor, and manage the information security team, fostering their professional development.
- Oversee the operation of security controls, including network security, endpoint security, data loss prevention, and access management.
- Establish and enforce information security policies, procedures, and standards across the organization.
- Manage and coordinate the response to security incidents and breaches, ensuring minimal impact.
- Conduct regular risk assessments and vulnerability management programs.
- Ensure compliance with relevant industry regulations and legal requirements.
- Oversee security awareness training programs for all employees.
- Manage relationships with third-party vendors and security service providers.
- Report on the security posture and risk landscape to executive management and the board.
Requirements
- Master's degree in Information Technology, Cybersecurity, or a related field.
- 10+ years of progressive experience in information security, with at least 5 years in a management or leadership role.
- Proven experience in developing and executing comprehensive security strategies, particularly in industrial or OT environments.
- Strong understanding of cybersecurity best practices, frameworks (\"e.g., ISO 27001, NIST\"), and risk management principles.
- Experience with managing security teams and leading incident response efforts.
- Knowledge of cybersecurity laws and regulations relevant to the South African context.
- Excellent leadership, communication, and interpersonal skills.
- Ability to manage budgets and vendor relationships effectively.
- Relevant professional certifications such as CISSP, CISM, CRISC are required.
- Experience in the mining or industrial sector is highly advantageous.
- Proficiency in translating business requirements into security solutions.
Benefits
- Highly competitive salary and executive bonus structure.
- Comprehensive medical, dental, and vision insurance.
- Generous pension fund and life insurance benefits.
- Significant opportunities for leadership development and career progression.
- Hybrid work arrangement providing work-life balance.
- Relocation assistance may be available for successful candidates.
- Access to advanced security technologies and cutting-edge industry insights.