Cyber Risk & Information Security Officer

Nedbank; Johannesburg; On-site; ZAR 900,000 - 1,300,000; Full time

Job summary

Nedbank is seeking a Business Information Security Officer to drive cyber risk governance and resilience within IT risk management. You will embed the Group IT and Cyber Risk Framework and advise stakeholders on cyber and IT risks impacting Nedbank’s business units.

You will collaborate with risk committees, monitor regulatory requirements, and guide technology and business teams on strengthening security controls and risk-aware practices across the organization.

Qualifications

• 3+ years' experience in Information Security Risk / Cyber Security Risk.
• Diploma or higher in Information Security, IT or related field.
• Knowledge of governance, risk and controls frameworks.
• CISM/CRISC/CISA/CISSP or related certifications preferred.

Responsibilities

• Support the Cyber Resilience Risk Management Framework implementation.
• Provide guidance to mitigate cyber and IT risks for Nedbank business units.
• Collaborate with stakeholders and committees to embed security controls.
• Monitor risk indicators and regulatory compliance across clusters.

Skills

Information Security

Cyber Security

Cloud Computing

Emerging Technologies

Artificial Intelligence

Blockchain

Cryptocurrencies

Education

Diploma

Advanced Diplomas/National 1st Degrees

Job description

Nedbank is seeking a Business Information Security Officer to drive cyber risk governance and resilience within IT risk management. You will embed the Group IT and Cyber Risk Framework and advise stakeholders on cyber and IT risks impacting Nedbank’s business units.

You will collaborate with risk committees, monitor regulatory requirements, and guide technology and business teams on strengthening security controls and risk-aware practices across the organization.