Manager: Cyber and Information Security Implementation and Governance

About the position

To manage the cyber-governance team outputs as well as to drive the implementation of the cyber and information security programme within the company.

JOB DESCRIPTION

• Provide input to the divisional operational plan to ensure achievement of strategic and operational objectives.
• Define, plan and allocate work for the security governance team, in alignment with departmental and operational plans.
• Manage the performance and development of the team.
• Coach, steer, motivate and supervise the outputs of the team, ensuring quality in execution of work delivered through staff.
• Guide the refinement and continuous improvement of tools, methods and processes in the areas of security risk, threat and policy management.
• Drive the implementation of the cyber and information security (CIS) programme by defining the scope, objectives and deliverables based on organisational inputs and risk profile changes.
• Work closely with the cyber security technical consultant to ensure alignment of cyber technologies within the programme.
• Ensure appropriate procurement and contracting for the CIS programme through liaising with CIS Unit.
• Lead and participate in engagements with relevant stakeholders/clients, within the company Group and external parties, displaying a service orientation in own work and the ability to solicit information as well as to convey and explain information fluently.
• Lead governance structures for the CIS programme to ensure alignment of roles and activities by various stakeholders across the company Group.
• Manage the provision of management information for the purposes of decision-making.

JOB REQUIREMENTS 

• An Honours degree (NQF 8) in Security, Information Technology or an equivalent qualification;
• A certificate in Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM); and
• 8–10 years’ experience in a cyber and information security management environment with a minimum of two years’ exposure to a holistic enterprise wide cyber and information security programme implementation.

 Additional requirements include:

• Solid knowledge of leading information security best practices, relevant legislation; information technology trends; project and programme management; and procurement and contract management.

People with disabilities are welcome to apply

Desired Skills:

• Leading change
• Promoting team work
• Drive for results