Manager: Information Security

UWC Online - University of the Western Cape; Bellville; On-site; ZAR 60 000 - 100 000; Full time

Job summary

Join a forward-thinking institution as the Manager of Information Security, where you will play a critical role in enhancing the university's InfoSec capabilities. This permanent position offers the chance to lead initiatives in governance, risk management, and incident response, ensuring a secure environment for all stakeholders. With a focus on developing robust security architectures and responding effectively to incidents, you will collaborate with various teams to implement best practices and foster a culture of security awareness. This is an exciting opportunity to make a significant impact in a dynamic educational setting.

Qualifications

• 5 years' experience in InfoSec or 8 years with NQF 6 diploma.
• Certifications like CISSP or CISM are required.

Responsibilities

• Lead the development of security policies and strategies.
• Oversee incident response plans and ensure compliance.

Skills

Information Security Governance

Risk Management

Incident Response

Analytical Skills

Communication Skills

Leadership

Education

Bachelor's degree in Computer Science or Information Systems

NQF 6 diploma with InfoSec certification

Tools

MS Office

NIST

ISO27001

Job description

The University of the Western Cape (UWC) seeks to appoint an experienced Manager: Information Security in its Information and Communication Services (ICS) department.

This permanent position based at the Bellville main campus reports to the Deputy Director: ICT Governance Risk and Compliance. The role is pivotal in maturing the University’s Information Security (InfoSec) capabilities across governance, risk management, program development, and incident response.

This demanding yet stimulating role requires an individual with extensive business and technical skills. Join us at an exciting time in the University’s history.

1. Key Performance Areas:

1. Information Security Governance: Establish, communicate, and maintain security policies; lead security strategy development; identify legal and regulatory requirements; establish reporting channels.
2. Information Security Risk Management: Classify information assets; implement risk assessment and mitigation processes; evaluate threats and vulnerabilities; integrate risk management into operations.
3. Information Security Program Development: Develop security architectures; create and maintain security plans; specify activities; develop awareness and training programs; advise on security requirements and controls; establish metrics.
4. Information Security Program Management: Oversee program execution; monitor controls and compliance; provide guidance; collaborate with operational teams to ensure effective control management and strategy implementation.
5. Information Security Incident Management and Response: Develop incident response plans; implement detection and response processes; establish escalation procedures; investigate incidents; communicate with stakeholders; integrate with disaster recovery; train staff; lead incident resolution and root cause analysis.

Qualifications, Skills, and Experience:

• Bachelor’s degree in Computer Science or Information Systems with 5 years' relevant experience, or an NQF 6 diploma with an internationally recognized InfoSec certification and 8 years' experience.
• Certifications such as CISSP or CISM.
• IT Service Management experience; enterprise InfoSec management experience; knowledge of legal and compliance frameworks including POPIA.
• Proficiency in security frameworks (NIST, ISO27001), enterprise architecture, and security incident management.
• Advanced MS Office skills.

Preferred/Advantageous Qualifications, Skills, and Experience:

• Experience developing policies aligned with ISO standards.
• Knowledge of IT Governance and cybersecurity practices.
• Certifications in Risk Management, Project Management, COBIT-5.
• Experience in higher education sector is advantageous.

Required Competencies:

• Analytical skills, problem-solving, ability to work independently, excellent planning and coordination, stakeholder relationship management, business acumen, attention to detail, leadership, communication, facilitation, and interpersonal skills.