Information Security Officer

Network Finance; Gauteng; On-site; ZAR 1,000,000 - 1,800,000; Full time

Job summary

Network Finance in South Africa seeks a senior information security leader to develop and oversee the organisation's security strategy, policies, risk management, and governance across cloud, infrastructure, applications and OT. You will drive incident preparedness, audits, third‑party security, and executive reporting while guiding teams and external partners.

The role requires leadership experience, a deep understanding of information security frameworks, and the ability to engage with

Qualifications

• Bachelor's degree in information security or a related field.
• Relevant information security or cybersecurity certification.
• Postgraduate qualification is advantageous.
• CISSP and CISM certifications are advantageous.

Responsibilities

• Develop and maintain the organisation's information security strategy, roadmap, and maturity plan.
• Establish, implement, and govern information security policies, standards, and controls.
• Identify, assess, monitor, and report on cyber and information security risks.
• Provide security oversight for infrastructure, cloud platforms, applications, OT, and digital initiatives.
• Lead cybersecurity incident preparedness, response, escalation, and recovery processes.
• Drive governance, risk, compliance, and audit-related security activities.
• Oversee identity and access management, data protection, privileged access controls, and classification frameworks.
• Manage third-party security risks across vendors and partners.
• Champion cybersecurity awareness and behavioural change programmes.
• Provide executive-level reporting on security posture, cyber risks, vulnerabilities, compliance status, and remediation initiatives.
• Coordinate security audits, assurance reviews, and continuous improvement activities.
• Lead and develop cybersecurity capabilities across internal teams and external providers.

Education

Bachelor's Degree in Information Security, Information Technology, Computer Science, Information Systems, or related field

Postgraduate qualification in Information Security / Cybersecurity / Risk Management / Business Management

Relevant Information Security or Cybersecurity certification

CISSP

CISM

Job description

Key Responsibilities

• Develop and maintain the organisation's information security and cybersecurity strategy, roadmap, and maturity plan.
• Establish, implement, and govern information security policies, standards, and controls.
• Identify, assess, monitor, and report on cyber and information security risks.
• Provide security oversight for infrastructure, cloud platforms, applications, operational technology, and digital transformation initiatives.
• Lead cybersecurity incident preparedness, response, escalation, and recovery processes.
• Drive governance, risk, compliance, and audit-related security activities.
• Oversee identity and access management, data protection, privileged access controls, and information classification frameworks.
• Manage third-party security risks across vendors, service providers, and technology partners.
• Champion cybersecurity awareness and behavioural change programmes across the business.
• Provide executive-level reporting on security posture, cyber risks, vulnerabilities, compliance status, and remediation initiatives.
• Coordinate security audits, assurance reviews, and continuous improvement activities.
• Lead and develop cybersecurity capabilities across internal teams and external service providers.

Qualifications

• Bachelor's Degree in Information Security, Computer Science, Information Technology, Information Systems, or a related field.
• Relevant Information Security or Cybersecurity certification.

Advantageous

• Postgraduate qualification in Information Security, Cybersecurity, Information Technology, Risk Management, Business Management, or a related discipline.
• CISSP (Certified Information Systems Security Professional).
• CISM (Certified Information Security Manager).

Experience

• 8-10 years' experience in Information Security, Cybersecurity, IT Risk Management, IT Governance, Security Operations, Infrastructure Security, or related disciplines.
• Minimum 5 years in a cybersecurity leadership, management, or senior specialist capacity.
• Proven experience developing and implementing information security frameworks, policies, governance structures, and security strategies.
• Strong background in cyber risk assessments, security audits, compliance reviews, and control effectiveness testing.
• Experience managing security incidents, vulnerability management programmes, and cybersecurity operations.
• Exposure to cloud security, data protection, operational technology security, and enterprise security controls.
• Ability to engage effectively with executives, auditors, regulators, technology teams, and business stakeholders.