Information Security Officer Morningside, Sandton

Clientèle Life Assurance Company Limited; Sandton; Vor Ort; ZAR 900.000 - 1.500.000; Vollzeit

Zusammenfassung

Clientèle Life Assurance Company Limited is seeking an Information Security Officer to shape the information security vision and strategy for the Infrastructure and Operations department. You will drive governance, management, processes, and user education, ensuring the protection of information assets.

Key responsibilities include overseeing security operations, conducting risk assessments, and implementing a cloud-centric security model.

Qualifikationen

• Bachelor’s degree in information security, computer science, or a related field is required.
• Certifications such as CISSP, CISM or CIPM are preferred.
• 5-7 years of experience in information security and risk management are expected.
• Experience in governance, security standards and vendor management is desirable.

Aufgaben

• Oversee information security governance and framework implementation.
• Audit, monitor, and improve security across IT systems and data.
• Lead risk assessments and management of security threats and vulnerabilities.
• Manage vendor risk assessments and contract/security negotiations.
• Develop and implement an enterprise information security program.

Kenntnisse

Information security

Risk management

Governance

Security standards

Vendor management

Security auditing

Ausbildung

Bachelor’s degree in information security, computer science, or a related field

Relevant certification(s) preferred (e.g. CIPP; CIPM; CISSP; CISM)

Jobbeschreibung

Information Security Officer

We are looking for an Information Security Officer to join the Clientèle Infrastructure and Operations department. As the Information Security Officer, you will be responsible for the information security vision, strategy, governance, management, processes, and user education.

Purpose:
Responsible for creating the vision and setting the strategy for information security. Responsibilities also include security-related governance, management, and processes.

Duties & Responsibilities

Responsibilities:

1. Oversee information systems and company security
2. Evaluate, report on, and suggest new ideas related to any security threats
3. Develop the steps necessary to protect the company’s interests
4. Provide advice and leadership to existing administrative security policies
5. Audit the current systems in place, as well as direct and implement new standards
6. Track the latest IT security innovations and keep abreast of the latest cybersecurity technologies
7. Create and implement a robust IT security strategy
8. Manage IT security operations
9. Develop, enhance and deploy a cloud-centric cybersecurity model
10. Deploy robust IT Security technologies
11. Perform IT Security Risk assessments and investigate ways to minimize threats
12. Monitor IT Security vulnerabilities and hacking threats in network and host systems
13. Implement an effective process for reporting IT Security risks, incidents, and investigation of breaches
14. Respond to all information security incidents
15. Serve as a point of contact to develop and sustain controls to ensure compliance and security throughout the life cycle of data and services
16. Review new vendor requests and manage the vendor cybersecurity risk assessment process
17. Review and respond to all relevant audits, including all Data Security and Compliance client audits and assessments
18. Support the strategic requirements of the IT departments
19. Responsible for the protection of the electronic data processed by or stored
20. Develop, implement and monitor a strategic, comprehensive enterprise information security and risk management program
21. Work directly with the business units to facilitate risk assessment and risk management processes
22. Develop and enhance an information security management framework
23. Establish the appropriate security and governance practices
24. Proactively monitor, identify, investigate, and resolve technical incidents and problems

Desired Experience & Qualification

Experience and qualifications:

1. Bachelor’s degree in information security, computer science, or a related field
2. Relevant certification(s) preferred (e.g. CIPP; CIPM; CISSP; CISM)
3. 5-7 years experience with information technology security
4. 5-7 years experience in security principles and security standards
5. 5-7 years experience assessing, monitoring and managing security risks
6. 5-7 years experience in information security management
7. Experience with risk management and governance solutions
8. Experience with contract and vendor negotiations and management, including managed services