Head : Security Operations

Job Purpose: The Head of Security Operations is responsible for overseeing aspects of security operations, including threat detection, incident response, and security infrastructure management. This role involves developing and implementing security policies, managing security risks, ensuring regulatory compliance, and leading a team of information security professionals. The position demands a deep understanding of information security principles, threat intelligence, risk management, and operational management.

Key Responsibilities

1. Develop and implement a comprehensive information security strategy aligned with the company's objectives and industry's best practices.
2. Drive innovation in information security to enhance service delivery and protection.
3. Develop, implement, and enforce security policies, procedures, and guidelines.
4. Ensure compliance with industry standards and regulatory requirements.
5. Conduct regular risk assessments and develop mitigation strategies for information security risks.
6. Implement risk management strategies to ensure business continuity and data protection.
7. Lead incident response in identifying, containing, and eradicating cyber threats.
8. Develop and maintain incident response plans.
9. Oversee the collection and analysis of threat intelligence to anticipate and mitigate potential cyber threats.
10. Implement continuous monitoring of the company and client's information systems to detect and respond to security incidents.
11. Recruit, train, and mentor a team of information security professionals.
12. Foster a culture of collaboration, innovation, and continuous improvement within the team.
13. Evaluate, implement, and manage security tools and technologies.
14. Stay updated with the latest cybersecurity trends and technologies to enhance the company and client's security capabilities.
15. Manage relationships with external partners and clients.
16. Ensure that third-party services meet the company's security standards and requirements.
17. Implement metrics and KPIs to track the performance and effectiveness of information security operations.
18. Provide regular reports to senior management on the security posture, incidents, and key performance indicators.
19. Maintain comprehensive documentation of security policies, procedures, and incident reports.
20. Promote knowledge sharing within the team and across the organization.

Internal and External Relationships

Internal Relationships: Executive Team (C-suite, including CEO, CIO, CTO, etc.), IT Team (Infrastructure, Development, and Operations), Compliance and Legal Teams, Risk Management Department, Security Operations and Incident Response Teams, Human Resources (HR), Finance Team, Internal Auditors.

External Relationships: Vendors and Managed Security Service Providers (MSSPs), Regulatory Bodies and Compliance Authorities, External Security Partners and Consultants, Law Enforcement Agencies (Cybersecurity, Criminal Investigation), Industry Peers and Cybersecurity Communities, External Auditors (for compliance and security audits).

Qualifications and Experience

1. Minimum NQF level 7 equivalent qualification.
2. Bachelor's degree in computer science, Information Technology, Cybersecurity, or related field.

Knowledge, Skills & Abilities Required

1. Minimum 5 years' experience in information security or cybersecurity roles, with at least 5 years in a leadership position.
2. Proven track record in managing and leading information security teams in a fast-paced environment.
3. Extensive experience in incident response, risk management, and security policy development.
4. Demonstrated ability to manage large-scale security projects and initiatives.
5. Strong background in security compliance and regulatory requirements.
6. In-depth knowledge of information security frameworks and standards.
7. Understanding of vulnerability assessment and penetration testing methodologies.
8. Knowledge of network security protocols and technologies.
9. Familiarity with endpoint security solutions.

Behaviors Required

1. Strategic Vision & Decision-Making.
2. Leadership & Team Management.
3. Technical Expertise.
4. Incident Management & Crisis Handling.
5. Stakeholder Engagement & Communication.
6. Governance, Compliance, & Audit.
7. Adaptability & Innovation.
8. Budgeting & Resource Management.
9. Ethical Conduct.
10. Cultural Fit & Adaptability.
11. Collaboration.