About the position
Manager: Information Security
Information and Communication Services (ICS)
The University of the Western Cape (UWC) seeks to appoint an experienced Manager: Information Security in its Information and Communication Services (ICS) department.
The University has set itself exciting and challenging goals in its Institutional Operating Plan (IOP), which rely heavily on ICT's to deliver integrated solutions that enable and support its Academic and Research programs, and it's Administrative and Professional Services departments.
This permanent position based at the Bellville main campus will report to the Deputy Director: ICT Governance Risk and Compliance and will play a pivotal role in maturing the University's Information Security (InfoSec) functional domain and capabilities.
This is a demanding but very stimulating role, which requires an experienced individual with the appropriate breadth and depth of business and technical skills and competencies.
We invite you to join our team at a very exciting time in the University's history.
Key Performance Areas:
- Information Security Governance
- Establish, communicate and maintain information security policies, procedures and documentation,
- Lead the InfoSec strategy development and implementation to address evolving cybersecurity threats and protect information assets,
- Identify relevant legal and regulatory security requirements,
- Establish communication channels that support information security governance.
- Information Security Risk Management
- Establish a process for information asset classification and ownership,
- Lead information risk assessment, mitigation and reporting to closure,
- Ensure regular threat and vulnerability evaluations,
- Embed risk and threat management into operations.
- Information Security Program Development
- Ensure the development of information security architectures;
- Develop a program for security, training and awareness,
- Integrate security requirements into processes, activities and contracts,
- Define metrics to measure program effectiveness.
- Information Security Program Management
- Oversee execution of security programs,
- Monitor third-party and outsourced control performance,
- Provide security guidance across the institution,
- Provide information security awareness and training to staff, students and stakeholders,
- Monitor and report on effectiveness of controls and policy compliance,
- Collaborate with Operational Teams and stakeholders to manage controls and align security strategies with operational needs.
- Information Security Incident Management and Response
- Develop and maintain response plans and procedures,
- Detect and respond to InfoSec incidents,
- Establish escalation and authority channels,
- Oversee investigations of security incidents (e.g. forensics, evidence handling),
- Coordinate stakeholder communications,
- Align incident response plans with the institution's DR and BCP plans,
- Train stakeholders on incident handling,
- Guide resolution of major incidents,
- Lead post-incident reviews and resolution.
Minimum Requirements:
Qualification, Skills and Experience:
- Bachelor's degree in Computer Science or Information Systems, or an equivalent NQF-7 accredited qualification with 5 years' experience in a similar role and at a similar level or
- Diploma at NQF 6 level and an accredited, internationally recognised Information Systems Security certification with 8 years' experience in a similar role and at a similar level
- An accredited, internationally recognised Information Systems Security certification (CISSP, CISM, etc.),
- Demonstrable IT Service Management experience,
- Relevant Information Security (InfoSec) Management experience in an enterprise environment,
- Knowledge of legal, regulatory and compliance requirements related to InfoSec (e.g. POPIA),
- Proficient in security frameworks (e.g. NIST, ISO27001),
- Good experiential knowledge of enterprise business system architecture (including data centre; server environment; storage network; databases; operating systems; applications; WAN & LAN networks)
- Successful track record in developing and managing InfoSec projects / programs,
- Experience in Security incident management, investigations and root cause analysis,
- Advanced proficiency in MS Office (MS Word, Excel, Power Point),
Preferred/Advantageous Qualifications, Skills and Experience:
Below are the preferred requirements that would be advantageous to candidates, but are not essential:
- Experience in developing InfoSec policies, plans and procedures aligned to ISO/IEC [Phone Number Removed]; standards,
- Strong knowledge of IT Governance and cybersecurity practices,
- An accredited IT Risk Management certification at intermediate / practitioner level,
- Accredited certification in Project Management (e.g. PMP, Prince2),
- COBIT-5 certification in IT Governance,
- Experience in the use of Microsoft Project,
- Experience working in the Higher Education sector would be advantageous
Required Competencies:
- Diagnostic information gathering, analytical thinking and problem-solving skills,
- Demonstrated ability to work unsupervised to meet deadlines and to deliver results,
- Excellent planning, co-ordination and time management skills,
- Effective teamwork and the ability to collaborate and build strong relationships with diverse stakeholder groups,
- Good business acumen and understanding of business requirements on ICT,
- Attention to quality and detail,
- Ability to influence, establish focus, lead and motivate teams to achieve common goals,
- Excellent customer & service orientation,
- Good listening skills and inter-personal awareness,
- Strong personal credibility,
- Excellent English Communication skills (verbal and written),
- Strong facilitation and inter-personal skills,
- Strong business acumen.
In your application, you are encouraged to highlight your strengths and include anything else you deem exceptional and outstanding to be considered by the selection panel. In addition, please attach a cover letter motivating your suitability, a detailed curriculum vitae including contact details of three referees, and your highest qualification to your online profile.
To apply please visit: [URL Removed]
Location: Main Campus - Bellville, WC ZA (Primary)
Closing Date: 30 May 2025
DISCLAIMER: By applying for the position, you consent to the University sharing your application, including curriculum vitae, with University stakeholders to process the application. In line with the University's commitment to diversifying its workforce, preference will be given to suitably qualified applicants in line with our Employment Equity Targets. The official retirement age at UWC is 65 years. The University reserves the right to not make an appointment, make an appointment at a different level, seek additional candidates and may conduct competency assessments.
Desired Skills:
- Attention to quality and detail
- Excellent English Communication skills (verbal and written)
- Good listening skills and inter-personal awareness
Desired Work Experience:
- 5 to 10 years Systems / Network Administration
Desired Qualification Level:
