Business Information Security Officer

5 days ago

Johannesburg, South Africa Nedbank Full time

**Job Classification**

**Requisition**:

- 136758 - Nozi Masabalala**Cluster** - Nedbank Wealth Cluster - Legal Risk Compliance**Closing Date** - 15 November 2024**Please Note: Preference will be given to applicants from Underrepresented Groups**
- Job Family- Risk, Audit and Compliance
- Career Stream- Information Security Risk
- Leadership Pipeline- Manage Self: Leading Expert

**Job Purpose**
- Provide leading expertise and guidance to ensure the security of Nedbank Groups Information Assets. The Group Executive, via the Group Chief Risk Officer, designates the Chief Information Security Officer (CISO), as an independent second line role, to be responsible and accountable overall for the Cyber Resilience Risk Management within the Group.**Responsibilities**:

- Deliver and meet the strategic financial objectives by managing the budget for the Cluster in line with agreed principles.
- Responsible for providing oversight and promoting cyber resilience across the Group.
- Develop and maintain cyber resilience strategy in collaboration with business and Group Technology(GT).
- Responsible for the digitisation of cyber resilience risk management.
- Co-ordinate cyber resilience across Nedbank.
- Provide expert advice on all aspects of cyber resilience, including providing input to specialised cyber business initiatives.
- Create and manage the Group's Cyber Resilience Programme.
- Monitor the effectiveness of cyber resilience arrangements and report to the Group Executive Committee and Board.
- Provide oversight in the investigation of cybersecurity incidents.
- Responsible for cybersecurity awareness programme.
- Develop and co-ordinate Group wide cyber risk assessments.
- Co-ordinate compliance efforts to cyber related regulatory programmes.
- Meet business objectives by influencing Information Technology (IT) delivery.
- Responsible to lead operational risk activities and takes greater responsibility for risk and governance.
- Manage material incidents and crises by leading the Cyber Crisis Management Team.
- Influence and set the tone for Cyber Security across the Group.
- Manage cyber co-ordinated asssurance.
- Act as the Chair of the Cyber Crisis Management Team, and responsible for developing and maintaining of the Playbooks.
- Be a thought leader on Information Technology (IT) matters across industries.
- Ensure the delivery of key IT projects.
- Ensure that relevant IT policies are in place to mitigate people risk.
- Meet compliance requirements by ensuring that the constructs of risk, governance and compliance are adequately addressed.
- Has sufficient authority, independence, resources and access to the Board - Group Risk and Capital Management Committee (GRCMC), Group IT Committee (GITCo) and Group Audit Committee (GAC).
- Provide an effective challenge that questions existing cyber resilience processes and information, while conducting specific testing of procedures and processes, consistent with the unique aspects of the Group's CRRMF and risk profile.
- Essential Qualifications - NQF Level- Professional Qualifications/Honour’s Degree
- Preferred Qualification- Computer Science and /or Commerce
- Preferred Certifications- Certified Information Security Manager (CISM); Certified Information Systems Security Professional (CISSP). Preferred: Certified Risk & Information Systems Control (CRISC) Certified Information Systems Auditor (CISA)
- Minimum Experience Level- 11 years experience in banking and an IT environment covering Business Continuity, Disaster Recovery, Information Security, Digital Forensics and Risk Management.8-10 years being in management**Technical / Professional Knowledge**
- Business continuity standard
- Digital computing (hardware components)
- Digital forensic tools and techniques
- Ethics and Fraud
- Forensic examination
- Information systems
- International Security Forum (ISF) Standards
- Nedbank policies and procedures
- Nedbank vision and strategy
- Relevant software and systems knowledge
- Relevant regulatory, compliance and risk legislation
- Behavioural Competencies- Strategic Influence
- Driving Execution
- Cultivating Networks and Partnerships
- Leading Change
- Operational Decision Making
- Digital Acumen
- Leading Virtual Teams
- **_Please contact the Nedbank Recruiting Team at +27 860 555 566_

  • Information Security Officer

    6 days ago

    Johannesburg, South Africa Kalagadi Manganese | View - Information Security Officer Full time

    Overview The Information Security Officer is responsible for protecting the organisation’s information assets by implementing and maintaining effective information security policies, procedures, and controls. This role ensures compliance with security standards, mitigates risks, and supports business continuity while safeguarding confidential and sensitive...

  • Information Security Leader: Policy, Risk

    6 days ago

    Johannesburg, South Africa Kalagadi Manganese | View - Information Security Officer Full time

    A leading mining company in Johannesburg is seeking an experienced Information Security Officer responsible for protecting information assets and ensuring compliance with security standards. The role involves developing and implementing security policies, managing security systems, and conducting risk assessments. Candidates should have a Bachelor's degree...

  • Information Security Officer

    2 weeks ago

    Johannesburg Metropolitan Area, South Africa Wolfpack Information Risk Full time R240 000 - R320 000 per year

    Our client is looking for an Information Security Officer (ISO) to join their team on a 12 month contract with a view to extend if a good fit.Key Responsibilities:To support the ISO team to achieve the following across all entities within the group:Risk Management: Identifying, accepting, developing solutions for, and mitigating risks.Maintain a risk...

  • Information Security Officer

    1 week ago

    Johannesburg, South Africa Wolfpack Information Risk Full time

    Head of Human Resources at Wolfpack Information Risk (Pty) Ltd Our client is looking for an Information Security Officer (ISO) to join their team on a 12 month contract with a view to extend if a good fit. Key Responsibilities To support the ISO team to achieve the following across all entities within the group: Risk Management: Identifying, accepting,...

  • Information Security Officer

    4 days ago

    Johannesburg, South Africa Wolfpack Information Risk Full time

    Head of Human Resources at Wolfpack Information Risk (Pty) Ltd Our client is looking for an Information Security Officer (ISO) to join their team on a 12 month contract with a view to extend if a good fit. Key Responsibilities To support the ISO team to achieve the following across all entities within the group : Risk Management : Identifying, accepting,...

  • Business Information Security Officer

    1 week ago

    Johannesburg, South Africa Nedbank Full time

    **Requisition Details & Talent Acquisition Contact** - REQ 127649- Tshego Semenya**Cluster** - Group Risk**Career Stream** - It Risk **Leadership Pipeline** - Manage Self: Expert **Position** - Business Information Security Officer**Job Purpose** - The BISO must support the business cluster in the implementation and execution of the cyber resilience risk...

  • Business Information Security Officer

    2 weeks ago

    Johannesburg, South Africa Nedbank Full time

    **Requisition Number and Talent Acquisition Contact** - REQ: 134658- Location: Sandton, Johannesburg- Closing Date: 14 November 2024- Talent Acquisition: Tshego Semenya**Cluster** - RBB- Career Stream- IT Risk- Leadership Pipeline- Manage Self: Technical **Position** - Business Information Security Officer**Job Purpose** - The BISO must support the business...

  • Business Information Security Officer

    2 weeks ago

    Johannesburg, South Africa Nedbank Full time

    **Job Purpose** - The BISO must support the CIB business cluster in the implementation and execution of the cyber resilience risk management framework that includes implementation of cyber risk assessments, strategy, cyber security programme, policies, standards, reporting of all cluster-specific cyber security programme elements and regulatory matters as it...

  • Information Security Officer

    7 days ago

    Johannesburg, South Africa NTT Ltd Full time

    At NTT we believe that by using innovative technology we can solve global challenges and create a world that is sustainable and secure. We are looking for curious people, from diverse backgrounds, that are keen to work in a fast-paced and agile environment. At NTT we trust our employees to do the right thing, even when no one is watching, which is why we...

  • Information Security Officer

    20 hours ago

    Johannesburg, South Africa WePlace Full time

    Gauteng, JHB - Northern Suburbs - Market - Related Annually Basic Salary - We have an exciting opportunity as an Information Security Officer based at our client in the Commercial Banking sector which is located in Sandton. **Role Description**: - The focus of the role will be to assess, identify and address the cyber and information security risks in the...