Duties & Responsibilities

Developing and implementing a comprehensive information / cyber security strategy for the operating division, which involves identifying potential threats and vulnerabilities, and implementing appropriate measures to mitigate these risks.
Ensuring compliance with relevant legal and regulatory requirements, policies, and standards related to information / cyber security.
Managing a team of cybersecurity professionals, which involves hiring, training, and supervising staff members, as well as providing guidance and support to ensure that they are performing their duties effectively.
Overseeing the deployment and maintenance of security tools and technologies, such as Endpoint Detection and Response (EDR), Vulnerability Management systems, and encryption software (e.g., BitLocker).
Conducting regular risk assessments and vulnerability testing to identify potential weaknesses in the organization's cybersecurity defenses.
Developing and delivering training programs to educate employees on best practices for information/cybersecurity.
Establishing and maintaining relationships with external stakeholders, such as regulatory agencies, industry groups, and vendors, to stay informed about emerging threats and new security technologies.
Developing and managing budgets for information / cyber security initiatives and ensuring that resources are allocated effectively.
Developing and implementing incident response plans to ensure that the organization can respond effectively in the event of an information/cybersecurity breach or other security incident.
Monitoring and reporting: Maintaining documentation of security measures, incidents, vulnerabilities, compliance with standards, and remediation efforts, and providing regular reports to management and other stakeholders on the status of security initiatives and risks.
Communicating regularly with senior management and other stakeholders to provide updates on the organization's cybersecurity posture and to make recommendations for improvements as needed.

Desired Experience & Qualification

Minimum of 6-8 years' ICT Experience with a related bachelor's degree/ National Higher Diploma in Information Technology, Computer Science, or related ICT qualification, of which
At least 5 years' relevant cyber security and information security experience in a large enterprise, of which at least 2 years at a managerial level or specialist experience
Further qualifications preferred:
CompTIA Security+,
Certified Ethical Hacker (CEH),
Certified Information Security Specialist (CISSP,
Certified Endpoint Detection and Response (CEDR),
Certified Information Security Manager (CISM).

Manager, Information Security

Job Type