Strategic Head of Information Security & GRC

Development Bank of Southern Africa (DBSA); Midrand; On-site; ZAR 1,200,000 - 1,800,000; Full time

Job summary

Development Bank of Southern Africa (DBSA) seeks Head: Information Security & GRC to lead enterprise ICT, information security, cyber resilience, and compliance across the bank. You will develop strategy, policies, and assurance reporting with alignment to risk appetite and regulatory obligations.

The role drives governance, control frameworks (ISO 27001, NIST, COBIT), incident response, and embedding a culture of security and continuous improvement across infrastructure, cloud, data and

Qualifications

• Develop and implement ICT, information security, and GRC strategies.
• Establish and enforce information security policies, standards, and procedures.
• Liaise with legal, risk, compliance and audit teams to manage regulatory risks and compliance obligations.
• Oversee Security Operations Centre (SOC) and incident response planning.

Responsibilities

• Develop and execute a comprehensive ICT, information security, and GRC strategy aligned to business objectives.
• Maintain regulatory compliance with POPIA, GDPR, ISO/IEC 27001 and related frameworks.
• Oversee SOC operations, threat monitoring, and incident investigations.
• Drive governance, risk, and assurance reporting to executives and board.

Job description

Development Bank of Southern Africa (DBSA) seeks Head: Information Security & GRC to lead enterprise ICT, information security, cyber resilience, and compliance across the bank. You will develop strategy, policies, and assurance reporting with alignment to risk appetite and regulatory obligations.

The role drives governance, control frameworks (ISO 27001, NIST, COBIT), incident response, and embedding a culture of security and continuous improvement across infrastructure, cloud, data and