Jobs in Soweto, South Africa

• Matric & Relevant tertiary qualification.
• One or more of the below certifications would be advantageous :

CISSP : Certified Information Systems Security Professional

CISA : Certified Information Systems Auditor

CISM : Certified Information Security Manager KPAs

• 5 years experience in Cyber Security.
• Framework Knowledge of Security best practices (CIA / ITIL / NIST / ISO).
• Experience with implementing Policies and controls.
• Experience with Cloud computing security.
• Must have experience in developing and implementation of Cybersecurity policies, standards, and guidelines.

RESPONSIBILITY :

The candidate will be responsible for the overall planning, governance, and successful delivery of the company's Cyber Security Strategy.

Develop and Implement Cybersecurity policies, standards, and guidelines.

Build and manage a strong team capable of managing cyber risks and responding to day-to-day threats.

Establish strong governance and assurance controls and processes to continuously measure and improve coverage and operating effectiveness of controls.

Perform periodic risk assessments to proactively identify and mitigate cyber risks.

Engage with business units to ensure consistent application of cybersecurity controls across all business processes, projects, and technology systems.

Partner with stakeholders across business units to cultivate a strong culture of cyber security at all levels, underpinned by a comprehensive ICS training and awareness plan.

Measure and Monitor Cybersecurity risk profile and posture and report to appropriate committees and stakeholders.

Monitor local regulatory and technical developments to ensure that cybersecurity policies are in line with these developments and engage.

Participate and represent cybersecurity risks in various committees and forums to provide updates and influence positive outcomes for the business.

Support audits (External and Internal) and reviews including regulatory reviews.

Conduct Security assessments.

Development of educational programs in security awareness.

Educating staff about security software and best practices for information security.