Information Security Lead

Network Finance; Randburg; On-site; ZAR 900,000 - 1,500,000; Full time

Job summary

Network Finance in Randburg is seeking a senior Information Security leader to shape the strategy and governance across the organisation. You will own policies and procedures, align with ISO 27001, NIST CSF, and CIS Controls, and report security posture to executives.

This role leads risk assessments, audits, and third-party security programs while driving regulatory compliance, threat intelligence, and a proactive security culture company-wide.

Qualifications

• Bachelor's degree in CS/IT/Information Systems or related field.
• CISSP, CISM or CISA certifications.
• 7+ years in information security or cyber security.
• 3+ years in a leadership role managing security teams.
• Proven experience overseeing a Security Operations Centre (SOC).
• Strong incident response leadership experience.

Responsibilities

• Develop and execute information security strategy aligned to business objectives.
• Own and maintain security policies, standards, and procedures.
• Ensure alignment with ISO 27001, NIST CSF, and CIS Controls.
• Provide regular reporting on security posture, risks, and programme progress to executive leadership.
• Lead information security risk assessments and maintain the risk register.
• Manage internal and external security audits and remediation activities.
• Oversee third-party and supplier security risk assessments.
• Drive compliance with relevant regulatory and security requirements, including POPIA.
• Provide strategic oversight of SOC activities.
• Monitor performance against security KPIs, SLAs, MTTD, MTTR targets.
• Ensure threat intelligence and threat-hunting strengthen detection and response.
• Drive continuous improvement across the security operations function.
• Lead incident response and crisis management; coordinate communications with stakeholders, clients, and regulators.
• Oversee vulnerability and threat management; prioritise remediation activities.
• Mentor security team and act as senior escalation point.

Skills

CISSP

CISM

CISA

Security leadership

SOC oversight

Incident response

Education

Bachelor's Degree

Job description

Key Responsibilities

Information Security Strategy & Governance

• Develop and execute the information security strategy and roadmap aligned to business objectives.
• Own and maintain security policies, standards, and procedures.
• Ensure alignment with recognised frameworks such as ISO 27001, NIST CSF, and CIS Controls.
• Provide regular reporting on security posture, risks, and programme progress to executive leadership.

Risk Management & Compliance

• Lead information security risk assessments and maintain the risk register.
• Manage internal and external security audits and remediation activities.
• Oversee third-party and supplier security risk assessments.
• Drive compliance with relevant regulatory and security requirements, including POPIA.

Security Operations

• Provide strategic oversight of Security Operations Centre (SOC) activities.
• Monitor performance against security KPIs, SLAs, MTTD, and MTTR targets.
• Ensure threat intelligence and threat-hunting initiatives strengthen detection and response capabilities.
• Drive continuous improvement across the security operations function.

Incident Response & Crisis Management

• Lead the response to major security incidents.
• Own and continuously enhance the incident response programme.
• Ensure root cause analyses are completed and improvements implemented.
• Coordinate communication with stakeholders, clients, and regulators when required.

Vulnerability & Threat Management

• Oversee the vulnerability management programme.
• Ensure critical vulnerabilities are remediated within agreed timelines.
• Collaborate with IT and application teams to prioritise remediation activities.
• Strengthen proactive threat management practices across the environment.

Leadership & Stakeholder Engagement

• Lead, mentor, and develop the security team.
• Act as the senior escalation point for information security matters.
• Partner with business leaders, clients, and vendors to drive security initiatives.
• Foster a culture of security awareness throughout the organisation.

Job Experience and Skills Required

• Bachelor's Degree in Computer Science, Information Technology, Information Systems, Cyber Security, or a related field.
• CISSP, CISM, or CISA certification.
• 7+ years of experience in Information Security or Cyber Security.
• 3+ years in a leadership role managing security teams or functions.
• Proven experience overseeing a Security Operations Centre (SOC).
• Strong incident response leadership experience.