Officer, Information Security

Standard Bank Group; Johannesburg; On-site; ZAR 600,000 - 800,000; Full time

Job summary

A leading financial services group in Johannesburg seeks a Cyber Security professional to implement a robust Cyber Resilience strategy. The role involves securing platforms and data, facilitating compliance, and collaborating with teams to enhance security measures. Candidates should have 5-7 years of relevant experience in the financial sector and a degree in a related field. Competitive compensation and growth opportunities await the right individual.

Qualifications

• 5-7 years in an information security or audit role within banking or financial services.
• Strong IT understanding and insights into cybersecurity trends.

Responsibilities

• Implement the Group Cyber Resilience strategy.
• Assess information security maturity scores and monitor compliance.
• Collaborate with various stakeholders to investigate risk controls.

Skills

Information Security

IT Risk Management

Benefits Management

Education

Degree in Business, Commerce, Information Technology, or Risk Management

Post Graduate Degree in Business, Commerce, or Information Technology

Job description

Company Description

Standard Bank Group is a leading Africa-focused financial services group and an innovative player on the global stage. We offer a variety of career-enhancing opportunities and the chance to work alongside talented, motivated professionals. Our clients range from individuals to businesses of all sizes, high net worth families, and large multinational corporates and institutions. We are passionate about creating growth in Africa, bringing meaningful value to our clients and communities, and creating a sense of purpose for our employees.

Job Description

To implement the Group Cyber Resilience strategy by securing platforms, ecosystems, and third-party integrations; protecting sensitive data, applications, and infrastructure from infiltration or misuse; guiding security capabilities in client segments and solutions. Facilitate security services ensuring policies, standards, and controls are embedded to prevent losses and ensure regulatory compliance. Educate employees about their InfoSec responsibilities.

• Alert responsible stakeholders of non-compliance with Cyber Resilience Policies and Standards, and collaborate on remediation plans and solutions.
• Assess information security maturity scores, guide implementation for awareness and prioritization, and monitor compliance with standards.
• Collaborate with feature teams, product owners, architecture, IT, vendors, and other stakeholders to investigate risk controls.
• Work with threat intelligence, cybersecurity, security engineering, and other risk functions to develop and maintain a holistic security strategy and remediation plans.
• Communicate and raise awareness of policies within business, technology, and risk communities.

Qualifications

• Degree in Business, Commerce, Information Technology, or Risk Management (minimum)
• Post Graduate Degree in Business, Commerce, or Information Technology (preferred)

Experience Required: Cyber Security

• 5-7 years in an information security or audit role within banking or financial services. Experience with multi-vendor, outsourced, and multi-system IT environments.
• 5-7 years of knowledge and experience with implementing and managing information security policies and frameworks in a corporate environment. Management experience with diverse teams.
• 5-7 years of strong IT understanding, insights into digital and platform operating models, and current cybersecurity trends and solutions.

Behavioural Competencies:

• Adopting Practical Approaches
• Articulating Information
• Checking Things
• Directing People
• Examining Information

Technical Competencies:

• Benefits Management
• Information Security
• Internal & External IT Environment
• IT Risk Management
• Knowledge of Banking & Financial Services