Information Security Officer

Kalagadi Manganese | View - Information Security Officer; Johannesburg; On-site; ZAR 600 000 - 800 000; Full time

Job summary

A leading mining company in Johannesburg is seeking an experienced Information Security Officer responsible for protecting information assets and ensuring compliance with security standards. The role involves developing and implementing security policies, managing security systems, and conducting risk assessments. Candidates should have a Bachelor's degree in IT or Cybersecurity and experience in information security roles. Relevant certifications are advantageous. This position is vital for safeguarding sensitive data.

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or related field.
• Professional certification in Information Security (CISSP, CISM) is advantageous.
• Minimum 3–5 years’ experience in information security or IT security roles.

Responsibilities

• Develop, implement, and maintain information security policies and procedures.
• Monitor and manage security systems, including firewalls and antivirus.
• Conduct regular risk and vulnerability assessments.
• Investigate security breaches and implement corrective actions.
• Provide training to staff on information security protocols.

Skills

Risk assessments

Vulnerability management

Incident handling

Knowledge of security frameworks

Education

Bachelor’s degree in Information Technology or related field

Professional certification in Information Security (e.g., CISSP, CISM)

Job description

Overview

The Information Security Officer is responsible for protecting the organisation’s information assets by implementing and maintaining effective information security policies, procedures, and controls. This role ensures compliance with security standards, mitigates risks, and supports business continuity while safeguarding confidential and sensitive data.

Responsibilities

Develop, implement, and maintain information security policies, standards, and procedures.

Monitor and manage security systems, including firewalls, antivirus, intrusion detection, and access controls.

Conduct regular risk assessments and vulnerability assessments to identify and address security gaps.

Investigate security breaches, incidents, and threats, and implement corrective actions.

Ensure compliance with relevant legislation, regulatory requirements, and industry best practices.

Provide training and awareness programs to staff on information security protocols and procedures.

Maintain up-to-date knowledge of emerging threats and technologies in information security.

Collaborate with IT, HR, and other departments to ensure secure handling of data and IT systems.

Support audits and internal/external security assessments.

Develop and maintain incident response and disaster recovery plans.

Qualifications

Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or related field.

Professional certification in Information Security (e.g., CISSP, CISM, ISO 27001 Lead Implementer/Lead Auditor) advantageous.

Experience

Minimum 3–5 years’ experience in information security or IT security roles.

Experience with risk assessments, vulnerability management, and security incident handling.

Knowledge of industry-standard security frameworks and best practices.