Chief Information Security Officer

Boardroom Appointments; Germiston; On-site; ZAR 1,000,000 - 1,400,000; Full time

Job summary

Boardroom Appointments is seeking a Chief Information Security Officer on a 12-month contract to lead the information security program. The role requires a strong balance of strategic governance and hands-on risk management to protect digital assets.

The ideal candidate will have a degree in business or IT, an MBA or IT security master’s, and relevant certifications. You will drive security policy, incident response, and compliance across the organisation.

Qualifications

• Degree in business administration or a technology-related field required (e.g., computer science, information technology, etc.)
• MBA or Masters in IT related field with a security focus preferred
• Related Cybersecurity, risk management and data privacy certifications preferred: CompTIA Security+, CISSP, CISM, CISA, and/or CEH

Responsibilities

• Contributes towards the development and drives the implementation of an organisation wide information security strategy aligned with the business objectives.
• Contribute towards establishing and maintaining information security policies, procedures, standards, and guidelines that comply with industry best practices and regulatory requirements.
• Oversees the identification, assessment and management of information security risks across the organisation, including data, systems, networks, and third-party relationships.
• Promotes a culture of security awareness among employees through training, education, and regular communication.
• Oversees the development and execution of incident response plans to effectively address and mitigate security incidents.
• Ensure compliance with relevant security regulations, laws, and industry standards. Assesses and selects appropriate security technologies and solutions to protect digital assets.
• Implements security monitoring tools and systems to detect and respond to security threats and providing regular reports to executive leadership and stakeholders.
• Stays informed about emerging security threats and industry trends to continuously enhance the organisation's security posture.
• Evaluates security risks associated with third-party vendors and service providers and implementing risk mitigation strategies.

Skills

Cybersecurity awareness

Security governance

Risk management

Data privacy

Education

Bachelor’s degree in business administration or technology-related field

MBA or Master’s in IT with security focus

Job description

About the job Chief Information Security Officer

12 month contract

• Degree in business administration or a technology-related field required (e.g., computer science, information technology, etc.)
• MBA or Masters in IT related field with a security focus preferred
• Related Cybersecurity, risk management and data privacy certifications preferred: CompTIA Security+, CISSP, CISM, CISA, and/or CEH

Responsibilities:

• Contributes towards the development and drives the implementation of an organisation wide information security strategy aligned with the business objectives.
• Contribute towards establishing and maintaining information security policies, procedures, standards, and guidelines that comply with industry best practices and regulatory requirements.
• Oversees the identification, assessment and management of information security risks across the organisation, including data, systems, networks, and third-party relationships.
• Promotes a culture of security awareness among employees through training, education, and regular communication.
• Oversees the development and execution of incident response plans to effectively address and mitigate security incidents.
• Ensure compliance with relevant security regulations, laws, and industry standards. Assesses and selects appropriate security technologies and solutions to protect digital assets.
• Implements security monitoring tools and systems to detect and respond to security threats and providing regular reports to executive leadership and stakeholders.
• Stays informed about emerging security threats and industry trends to continuously enhance the organisation's security posture.
• Evaluates security risks associated with third-party vendors and service providers and implementing risk mitigation strategies.