Business Information Security Officer

Nedbank

Johannesburg

Presencial

ZAR 900 000 - 1 300 000

Tempo integral

Há 3 dias

Torna-te num dos primeiros candidatos

Recebe uma resposta deste empregador

O teu currículo e carta de apresentação, adaptados exatamente ao que estão a contratar.

Ultrapassa os filtros ATS

Resumo da oferta

Nedbank is seeking a Business Information Security Officer to drive cyber risk governance and resilience within IT risk management. You will embed the Group IT and Cyber Risk Framework and advise stakeholders on cyber and IT risks impacting Nedbank’s business units.

You will collaborate with risk committees, monitor regulatory requirements, and guide technology and business teams on strengthening security controls and risk-aware practices across the organization.

Qualificações

3+ years' experience in Information Security Risk / Cyber Security Risk.
Diploma or higher in Information Security, IT or related field.
Knowledge of governance, risk and controls frameworks.
CISM/CRISC/CISA/CISSP or related certifications preferred.

Responsabilidades

Support the Cyber Resilience Risk Management Framework implementation.
Provide guidance to mitigate cyber and IT risks for Nedbank business units.
Collaborate with stakeholders and committees to embed security controls.
Monitor risk indicators and regulatory compliance across clusters.

Conhecimentos

Information Security

Cyber Security

Cloud Computing

Emerging Technologies

Artificial Intelligence

Blockchain

Cryptocurrencies

Formação académica

Diploma

Advanced Diplomas/National 1st Degrees

Descrição da oferta de emprego

Title:Business Information Security Officer

Personal and Private Banking

IT Risk

Manage Self: Technical

Position

Business Information Security Officer

Why join the team!

This is an opportunity to play a key role in protecting the business by strengthening its cyber resilience and information security risk posture. As the BISO, you will work at the intersection of business, technology, risk and cyber security, helping to embed the Group IT and Cyber Risk Framework while advising stakeholders on cyber and IT risks that could impact the business.

You will gain exposure to a broad range of evolving areas, including cyber security, cloud computing, AI, emerging technologies, third-party risk and regulatory requirements. The role offers the opportunity to influence how security is integrated into business initiatives, work closely with key stakeholders and contribute to building a strong, risk-aware and cyber-resilient organisation.

Job Purpose

To ensure that the Group IT and Cyber Risk Framework is embedded, operationalised and implemented within the business, while providing advice and guidance to mitigate business risks and ensure regulatory requirements are met.

The BISO will support the business cluster in the implementation and execution of the Cyber Resilience Risk Management Framework, including cyber risk assessments, cyber security strategy and programmes, policies and standards, reporting of cluster-specific cyber security programme elements, and regulatory matters relating to cyber security.

Job Responsibilities

Contribute to a culture conducive to the achievement of transformation goals (targets) and support business strategies that improve corporate image by participating in Nedbank Culture building initiatives (e.g. Surveys etc.).
Achieve business strategy by participating and encouraging others to participate in and support corporate social responsibility initiatives.
Foster transformation of the workplace and support Nedbank achievement of the BEE initiatives and transformation targets, by contributing to an environment where diversity is valued.
Improve work processes, productivity and reduce costs by offering innovative ideas and input to Group Risk and/or stakeholders and through soliciting input from managers and colleagues.
Develop risk plans that enable the implementation of the business strategy by breaking it down into targets and obtaining approval of plan from relevant strategic committees such as EXCO, ERCO, OPCOM, etc.
Ensure compliance with regulations and prevent losses by facilitating risk management in the business and by engaging with relevant stakeholders regarding risk-related issues.
Ensure alignment of area business processes to the Group Risk Framework by participating and providing information to Nedbank Risk Committees.
Keep business updated on a regular basis and analyse information generated from the risk exercises by ensuring that risk monitoring exercises across the business take place and are in line with all known risks.
Ensure business processes and systems are functioning by identifying and documenting risks.
Track the performance and compliance of the team by allocating tasks to the team according to different risk areas.
Ensure the business fully complies with risk standards by revising cluster risk process guidelines.
Mitigate risks by providing the business with relevant information, guidance and advice based on regulatory standards, compliance and audit findings.
Evaluate and analyse area audit findings and management improvement comments, by assessing whether actions will result in improvement and by making recommendations.
Meet financial objectives by containing costs.
Ensure improvements on identified risks by engaging with business, understanding risks and by creating action plans.
Operationalise the Nedbank Group IT and Cyber Risk Framework by ensuring that business unit level ERCO governance structure and charters are implemented, ensuring adequate risk reports generated, risk meetings held and risk processes aligned with group.
Build and maintain relationships with clients and service providers through attending meetings and utilising networking opportunities.
Share information and knowledge with stakeholders, peers and team by driving awareness campaigns.
Build relationships by reporting risk issues and by providing risk-related information to strategic committees, as per the Group Risk Framework.
Build long-term relationships and support stakeholders in reaching business objectives by keeping abreast of and sharing industry information with stakeholders.
Support the achievement of the business strategy, objectives and values by understanding Nedbank risk strategy and Business Unit Plan.
Identify training courses and career progression for self through input and feedback from management.
Ensure all personal development plan activities are completed within specified timeframe.
Share knowledge and industry trends with team and stakeholders during formal and informal interaction.

Job Resposibilities continued

Obtain buy-in for developing new and/or enhanced processes (e.g. operational processes) that will improve the functioning of stakeholders' businesses by highlighting benefits in support of the implementation of recommendations.
Drive compliance to security policies and standards on cluster infrastructure.
Primary interface between the cluster and CISO office.
Represent business as an information security representative on various committees.
Ensure alignment and implementation of CRRMF in cluster.
Report of all cluster specific information security program elements.
Work closely together with all stakeholders.
Actively executes the cyber security programme elements and other information and cyber security plans developed by the business.
Assist the cluster with identification of critical assets ("crown jewels") and feeding that back into the business impact analysis and risk management processes.
Work with the business to develop processes and procedures to ensure information security policies and standards are integrated.
Assist with third party supplier information and cyber security risk assessments and assurance.
Assist business with incident management related to cyber and/or IT incidents.
Conclude cyber / IT impact assessment on new business initiatives.
Build and maintain professional relationships by information sharing and professional networking within the bank.
Build and maintain internal stakeholder relationships through collaboration with stakeholders and regular communication via various media.