Cybersecurity Manager: Business Information Security

SUMMARY:

Protecting business-critical information isn’t just a task—it’s a mission.

Our Client is on a mission to maintain and develop a high-performing cyber security function in support of a complex business undergoing digital transformation. They are looking for a Senior Leader in the cybersecurity team to take responsibility for scaling ...

POSITION INFO:

Protecting business-critical information isn’t just a task—it’s a mission.

Our Client is on a mission to maintain and develop a high-performing cyber security function in support of a complex business undergoing digital transformation. They are looking for a Senior Leader in the cybersecurity team to take responsibility for scaling information and cyber security across the South Africa business. The focus is on business-related security capabilities including access management, security training and culture, third party and ecosystem security, and data security and protection.

What you’ll do:

People

• Enhancing cyber intellectual capital: Leadership and management of the business information security team covering talent development and performance management.
• Building culture and teaming: Management of internal partnerships for execution, including context setting, skills transfer, and up-skilling.
• Management of key external security partner and service relationships.
• Fostering business and IT relationships to define requirements in the context of business risk.

Process

• Work closely with Cyber Delivery Management, Architecture and Engineering capabilities to provide proactive advisory services to IT and business stakeholders.
• Take responsibility for core capabilities of access management, data security, third party security and awareness training, bridging the gap between business and cyber technical functions.
• Work with the SOC to manage threat and vulnerability management.
• Work with other cybersecurity team leaders, the CISO, and other key stakeholders to define and drive a threat-informed and risk-based cyber security strategy.
• Contribute to the ongoing improvement of cyber security processes and ways of working.
• Translate strategic security operational requirements into practical solutions and drive implementation.
• Contribute to the ongoing maintenance and enhancement of Cyber and Information Security Policies, Standards, Procedures and Guidelines.
• Remain aware of global security industry trends and influence the strategy accordingly.
• Manage forecasts and budgets.

Customer

• Understand Cyber, IT and Business strategies and contribute to the creation and delivery of the annual cyber security roadmap and execution with a specific focus on business information security and advisory.
• Plan and prioritize projects and workload to deliver to the roadmap.
• Provide updates, context and feedback to relevant stakeholders.
• Build close relationships with business and IT stakeholders to scale security and to drive the required level of controls over core assets.

Your expertise:

• 8+ years relevant experience in the cyber and information security discipline.
• Demonstrable experience in leading a specialised cybersecurity team within a large environment.
• Experience with security operations tools, frameworks, practices, and processes.
• Resiliency, determination, and pragmatism.
• May be required to assist outside of working hours
• Additional criteria
  • Comfortable giving presentations and training.
  • People leadership experience is advantageous.
  • Good report and technical writing skills.
  • Working knowledge of PCI-DSS.
  • Practical experience with the industry frameworks (e.g. CIS and COBIT).
  • Hands-on technical security experience is highly advantageous.

Qualifications required:

• 4-year IT qualification.
• Industry certifications (e.g. CISA, CISM, CISSP).

Key competencies:

• Makes sound technical decisions based on understanding of what is commercially achievable within technological constraints.
• Evaluates the applicability of solutions with the ability to challenge and qualify its suitability for the business.
• Leverages research on technology-related concepts, trends and best practices to provide guidance on IT roadmap.
• Set technical policies and procedures to support IT stability and success aligned to evolving technologies and methodologies.
• Responsive to external influences (positive or negative) on the organisation.
• Understands what is commercially achievable and makes sound business decisions.
• Supports the development of business acumen of team through knowledge sharing and upskilling.
• Maintains advanced knowledge of business operations and organisational metrics and trends.
• Effectively applies substantial in-depth analysis in order to determine and meet requirements.
• Quickly identifies key issues, stakeholders and viewpoints in a complex situation or problem.
• Finds ways to condense large amounts of information into a useful form.
• Anticipates the consequences of situations and proactively works to overcome potential obstacles.
• Asks perceptive, probing questions to get to the heart of the matter.
• Plans and ensures implementation of activities/projects identified in business strategy.
• Maintains a keen awareness of the interrelationships among various components of large-scale activities/projects.
• Allocates time and resources as required when faced with multiple demands and competing priorities.
• Considers the financial implications before finalising activity/project plans.
• Actively monitors resource allocation and utilisation and makes adjustments as necessary.
• Seeks and influences new relationships outside own unit and identifies new collaborative partnerships that better position programmes and services.
• Shares information with colleagues and partners about industry trends and business opportunities.
• Coaches others on how to develop proposals and work plans for effective partnership arrangements.
• Establishes connections that help facilitate the accomplishment of broader organisational objectives.
• Actively listens, interprets and presents messages in different ways to enhance understanding.
• Appropriately adapts the message, style, and tone of communication to accommodate a variety of audiences.
• Reviews presentations to ensure effective use of tools and techniques and provides recommendations.
• Prepares a wide variety of complex reports and documents using diverse sources.
• Confidently addresses groups of people, adapting style as appropriate for different audiences.
• Anticipates change by keeping up to date on current research and trends affecting one’s own field.
• Reviews, evaluates and disseminates information regarding key methodologies, best practices and tools to support a future landscape.
• Continually searches for ways to adapt and improve through change.
• Consciously models appropriate adaptions and encourages it in others.
• Devises action plans for adapting to change.
• Systematically analyses and shares the learning/ knowledge gained from change.
• Redirects own or own team’s efforts in response to changed circumstances to ensure effective problem solving.

Other information applicable to the opportunity:

• Permanent Position
• Location: Cape Town
• Environment: Hybrid - 4 days in the Office and Fridays at Home. However, it can change depending on work load or agreements between Employee and Line Manager.