Job Title : Maintenance Manager

Manpowergroup; Pretoria; On-site; ZAR 300,000 - 700,000; Full time

Job summary

An established industry player is seeking a skilled Information Security Manager to lead policy compliance and risk management initiatives. This role involves implementing a comprehensive information security framework, conducting regular audits, and ensuring adherence to statutory requirements. The successful candidate will manage a team, promote a culture of security awareness, and provide access to skills development opportunities. Join a dynamic environment where your expertise will directly contribute to safeguarding organizational assets and enhancing operational efficiencies. If you are passionate about information security and compliance, this is the opportunity for you.

Qualifications

• Matric and relevant degree/diploma required.
• Strong technical background in systems and network security.

Responsibilities

• Drive implementation and compliance of information security policies.
• Manage information security risk register and audits.
• Compile reports on policy compliance and security risks.

Skills

Information Security Management

Risk Management

Project Management

Technical Systems Security

Compliance Monitoring

Education

Matric

Relevant undergraduate degree/diploma

CISSP Certification

CISM Certification

CISA Certification

ISO/IEC 27001 Lead Implementor

CompTIA Security+

Job description

• Ensure that all policies developed are in line with contractual, legislative and industry best practice
• Ensure that all policy exceptions are documented and tracked through their risk life cycle
• Drive implementation and policy compliance across all business units
• Create and rollout an awareness program
• Define and measure metrics to ensure awareness programs are effective
• Establish and implement an information security risk management framework
• Manage and maintain an information security risk register that documents, evaluates, and tracks all information security risks and feeds into the organisational risk register
• Oversee, identify, and manage all related operational costs in accordance with financial policies, procedures, processes, prescribed schedule of payments, procurement and subcontractor management policies and procedures
• Establish and maintain appropriate internal controls and reporting systems to meet performance expectations
• Ensure operating efficiencies through enhanced resource management and budget control

Key Service Area

• Ensure that there are regular information security audits and penetration testing on various levels of application, database, policy etc.
• Ensure that all contracted security requirements are fulfilled
• Control the management of organisational risks through monitoring and reporting mechanisms
• Review the Business Continuity and Disaster Recovery plans annually to ensure all tasks are correctly assigned and are implementable by designated personnel
• Monitor compliance of organisational policies and procedures and adherence to all statutory and regulatory requirements prescribed for overall corporate governance

Reporting

• Compile and submit reports on policy compliance levels per business unit
• Compile and submit Information Security Management report to SSC
• Compile and submit report on information security risks and remediation plans

People Management

• Manage employees directly under supervision and maintain effective utilisation and discipline required to achieve business objectives
• Create an enabling environment that facilitates effective performance by direct reports and instills behaviour that supports the organisational values
• Provide access to skills development and capacity building opportunities

Requirements:

• Matric
• Relevant undergraduate degree/diploma and/or certificate
• Certification or completion of CISSP, CISM, CISA, ISO/IEC 27001 Lead Implementor and/or CompTIA Security+
• Strong technical background in systems and network security
• Project Management skills (ability to plan, organize, coordinate, and implement)
• Experience in compilation of management reports
• Understanding of, and practical experience of applying the Data Protection Act, the Freedom of Information Act and other related legislation, standards and codes of practice