Chief Information Security Officer (CISO)

Placements24; Durban; On-site; ZAR 1,800,000 - 2,800,000; Full time

Benefits offered by this job

Executive-level compensation package

Comprehensive medical and retirement

Relocation assistance may be available

Professional development and executive

Prime office location in Durban

Job summary

Placements24 is seeking a strategic Chief Information Security Officer (CISO) to lead our client's cybersecurity program in Durban. The role requires shaping the enterprise information security strategy, governance, and risk management to protect critical assets and data.

The ideal candidate will have a minimum of 10 years in information security with at least 5 years in leadership, plus certifications (CISSP/CISM/CGEIT).

Qualifications

• Master's degree in a related field required or equivalent.
• 10+ years in information security with at least 5 years in a leadership role (e.g., CISO, Senior Security Director).
• Proven experience building and implementing enterprise-wide information security programs.
• Deep understanding of cybersecurity threats, vulnerabilities and mitigation strategies.
• Strong knowledge of regulatory requirements (POPIA, SOX, PCI DSS).
• Excellent leadership, communication, and strategic planning skills.
• Experience managing security operations, incident response and risk management.
• Demonstrated ability to manage budgets and vendor relationships effectively.
• Experience in the financial services industry is highly desirable.
• Professional certifications such as CISSP, CISM, CGEIT required.

Responsibilities

• Develop and execute the overall information security strategy and roadmap.
• Establish and maintain enterprise-wide information security policies, standards, and guidelines.
• Oversee the information security risk management program, including risk assessments and mitigation strategies.
• Lead the incident response team, ensuring timely and effective resolution of security breaches.
• Manage the security architecture and engineering functions to ensure IT system integrity.
• Ensure compliance with laws, regulations and industry standards (POPIA, SOX, PCI DSS).
• Direct security awareness and training programs for all employees.
• Manage the information security budget and vendor relationships.
• Provide executive-level reporting on security posture, risks and incidents to the board.
• Build and lead a skilled and motivated information security team.

Skills

Leadership

Strategic planning

Communication

Incident response

Risk management

Security architecture

Budget management

Vendor management

Regulatory compliance

Education

Master's degree in Computer Science / Information Security / Business Administration

CISSP / CISM / CGEIT certifications

Job description

About the Role

Our client, a leading enterprise in the financial sector, is seeking a strategic and visionary Chief Information Security Officer (CISO) to lead their cybersecurity initiatives. This executive-level position is based in Durban and is responsible for establishing and maintaining the enterprise vision, strategy, and program to protect information assets. The CISO will direct the development and implementation of a comprehensive information security program that aligns with business objectives and regulatory requirements. This is a high-impact role requiring strong leadership, technical expertise, and business acumen. The CISO will oversee all aspects of information security, including risk management, incident response, security architecture, data privacy, and compliance. You will be responsible for building and mentoring a high-performing security team and fostering a security-conscious culture throughout the organization. This is an on-site role, offering the opportunity to be a key leader within a prominent organization in KwaZulu-Natal .

Key Responsibilities

• Develop and execute the overall information security strategy and roadmap.
• Establish and maintain enterprise-wide information security policies, standards, and guidelines.
• Oversee the information security risk management program, including risk assessments and mitigation strategies.
• Lead the incident response team, ensuring timely and effective resolution of security breaches.
• Manage the security architecture and engineering functions to ensure the integrity and security of IT systems.
• Ensure compliance with relevant laws, regulations, and industry standards (e.g., POPIA, GDPR).
• Direct security awareness and training programs for all employees.
• Manage the information security budget and vendor relationships.
• Provide executive-level reporting on security posture, risks, and incidents to the board and senior management.
• Build and lead a skilled and motivated information security team.

Requirements

• Master's degree in Computer Science, Information Security, Business Administration, or a related field.
• 10+ years of progressive experience in information security, with at least 5 years in a leadership role (e.g., CISO, Senior Security Director).
• Proven experience in developing and implementing enterprise-wide information security programs.
• Deep understanding of cybersecurity threats, vulnerabilities, and mitigation strategies.
• Strong knowledge of regulatory compliance requirements (e.g., POPIA, SOX, PCI DSS).
• Excellent leadership, communication, and strategic planning skills.
• Experience managing security operations, incident response, and risk management.
• Demonstrated ability to manage budgets and vendor relationships effectively.
• Experience in the financial services industry is highly desirable.
• Professional certifications such as CISSP, CISM, CGEIT are required.

Benefits

• Executive-level compensation package.
• Comprehensive medical and retirement benefits.
• Opportunity to shape the security future of a major enterprise.
• Relocation assistance may be available.
• Professional development and executive coaching.
• Prime office location in Durban .