Information Security and Governance Specialist

Boardroom Appointments; Johannesburg; On-site; ZAR 700,000 - 1,100,000; Full time

Job summary

Boardroom Appointments seeks an Information Security and Governance Specialist to lead IT governance, risk management, and security program initiatives in a Johannesburg-based environment. The role requires a Bachelor’s degree or equivalent, ITIL certification, and 5+ years of information security experience across multiple domains, including governance, risk, and compliance.

The incumbent will drive security controls, policy development, and incident response while coordinating with

Qualifications

• Bachelor's degree or equivalent in Computer Science / Information Systems / Information Technology.
• ITIL Certification.
• 5+ years of information security experience across multiple domains.

Responsibilities

• IT Governance Management
• Implementation of security measures that support Information Security to align with organizational strategy
• Assist in risk management through mitigation strategies based on information security best practice principles
• Review and provide input to business cases and technology specification documents
• Ensure compliance with information security policies, procedures and processes
• Participate in developing, implementing and maintaining information security policies, processes and procedures
• Take appropriate measures to safeguard company, customer and proprietary information
• Assist colleagues in the implementation of security measures for internal customers
• Execution of analysis, advisory services, and maintenance of information security policy(s), standards, guidelines, and procedures
• Support and deliver information security administration and provide technical and problem support to internal customers
• Assist in the definition and implementation of information security projects
• Monitor the risk register to ensure mitigation strategies are defined and effective
• Facilitate audits, inspections, testing and reviews of relevant processes and controls
• Compile IT risk management registers and report to Information Security Officer
• Ensure compliance with Change and Release Management processes
• Engage with stakeholders on IT risk management procedures
• Execute risk management tools and risk assessments
• IT Disaster Recovery
• Assist with development, implementation and testing of Disaster Recovery Strategy
• Ensure DRP alignment with defined recovery objectives
• Ensure DRP tests are conducted as planned
• Management of IT governance vendors
• Ensure supplier/vendor security management is effective and compliant with best practices and regulatory requirements
• Manage security-related contracts and NDAs with vendors and service providers
• Maintain professional relationships with security service providers
• Provide customer service to internal and external clients

Skills

Information Security

IT Governance

Risk Management

Education

Bachelor's degree or equivalent in Computer Science / Information Systems / Information Technology

Tools

ITIL Certification

Job description

Information Security and Governance Specialist

About the job Information Security and Governance Specialist

• Bachelors degree or the equivalent diploma in Computer Science / Information systems / Information technology
• ITIL Certification
• Information Security experience, with broad knowledge in all areas of Information Security, including but are not limited to payment technologies, virtualization, cryptography, networking and database security 5 years and above experience

Responsibilities:

• IT Governance Management
• Implementation of security measures that support the Information Security to ensure alignment with the organizational strategy
• Assist in the risk management process through the implementation of risk mitigation strategies based on Information Security best practice principles
• Review and provide input to business cases and Technology specification documents
• Ensure compliance with Information Security Policies, Procedures and Processes
• Participate in developing, implementing and maintaining Information Security
• Policies, processes and procedures based on industry standards and best practices
• Take appropriate measures to safeguard the company, customer and proprietary information from threats and vulnerabilities
• Assist colleagues in the implementation of security measures for internal customers
• IT Governance Management
• Execution of performance of analysis, advisory services, and the maintenance of Information Security policy(s), standards, guidelines, and procedures that are deployed and or developed in support of computer operating systems and or applications used by the organization
• Support and deliver information security administration and provide technical and problem support to internal customers
• Assist in the definition and implementation of Information Security projects
• Monitor the Risk Register to ensure that clear mitigation strategies have been defined and that the implementation of the mitigation strategies are effective
• Facilitate audits, inspections, testing and/or reviews of relevant processes and management controls by various internal groups and external groups
• Compile and consolidate IT risk management registers and report to the Information Security Officer
• Ensure compliance with the Change and Release Management process
• Engage with internal and external stakeholders on IT risk management procedures
• Execution of the risk management tools and risk assessments to ensure accuracy and completeness of information and security practices
• IT Disaster Recovery
• Assist with the development, implementation and testing of the Disaster
• Recovery Strategy
• Ensure that the Disaster Recovery Plans (DRP) are aligned with the business defined recovery point and recovery time objectives
• Ensure that Disaster Recovery Plan tests conducted according to the agreed test plan
• Management of IT Governance vendors
• Ensure that the supplier/vendor security management process is effective and based best practices and regulatory compliance
• Manage security related contracts and non-disclosure agreements with security suppliers, vendors and service providers
• Maintain professional relationships with security service providers
• Provide customer service to internal and external clients