Strategic Information Security Leader

Sanlam; Bellville; On-site; ZAR 500 000 - 800 000; Full time

Job summary

A leading financial services provider is seeking a Business Information Security Officer to oversee the Information Security Management System and ensure compliance with Group Governance requirements. The role requires establishing and managing a Business Information Security Programme, effective participation in initiatives, and the implementation of security controls. Key qualifications include experience in policy writing, relevant certifications, and a strong understanding of risk management practices. This position is critical in maintaining the organization's cyber and information security posture.

Qualifications

• Experience in policy writing and reviews.
• Familiarity with security practices and standards such as OWASP.
• Knowledge of Information Risk Methodologies (ideally ISF IRAM2).

Responsibilities

• Establish and manage a Business Information Security Programme.
• Report cyber security incidents to SGT CSIRT.
• Document Security risk management action plans and processes.

Skills

Infiltration testing (hacking)

Risk management

Project Management Tools

Reporting and Administration

Research and trend analysis on IT security leading practice

Education

Grade 12

Bachelor's degree in Information Technology, Commerce, Science, or Social Science

Information Security Certifications such as CISM, CISSP, CCSP, CISA, ISO 27000 Lead Implementer/Auditor

Job description

A leading financial services provider is seeking a Business Information Security Officer to oversee the Information Security Management System and ensure compliance with Group Governance requirements. The role requires establishing and managing a Business Information Security Programme, effective participation in initiatives, and the implementation of security controls. Key qualifications include experience in policy writing, relevant certifications, and a strong understanding of risk management practices. This position is critical in maintaining the organization's cyber and information security posture.