Chief Cyber Security Officer at REDi Recruitment

Job description

Qualifications:

• Relevant degree/ diploma
• Certifications in areas of speciality (such as CISM CISSP CISA ITIL etc. is essential
• Minimum 7 years (within the last 10 years) of experience in Information Security, Information Technology or related field, in a similar role within a Global company.
• Experience in developing and administering an Information Security Program.
• Working knowledge of and experience in the Policy and regulatory environment of Information Security.
• Excellent Project Management skills
• Excellent Communication skills (both Written & Verbal)

Experience:

• A demonstrated ability to work with Diverse groups of people.
• Excellent knowledge and experience in Information Security concepts trends and practices.
• Strong knowledge in the domains of IM Operations, IM Service Management, IT Disaster Recovery, and Security architecture application and infrastructure.
• Good understanding of IM Compliance and Audit frameworks and best practices
• Strong Leadership skills
• Problem Solving & Analytical skills

Accountabilities:

• Manage Global Security and Manage Global Security Services/ Manage Cyber Security:
• Define, maintain and manage information security risk treatment plan
• Establish and maintain an Information Security Management System
• Manage network and connectivity security
• Manage physical access to IM assets
• Information Security Reporting:
• Maintain a functional reporting relationship within the organisation
• Report periodically to the CIO and the IM Executive Team on the entity status with regard to information security
• Policy Development:
• Coordinate the development of organisation information security policies, standards and procedures
• Ensure that policies support compliance with external requirements;
• Information Security Oversight:
• Work closely with the established committees and forums to ensure that the information security environment is well managed and the necessary information is communicated.
• Serve as an internal information security advisor to the entity.
• Oversee and coordinate all aspects of alignment of the Information Security Management System (ISMS) with ISO 27001
• Security Architecture:
• Develop and maintain an effective information security architectural approach, ensuring that the approach is implemented in accordance with appropriate standards
• Liaise with the relevant parties to ensure that appropriate controls are implemented to prevent recurrence of information security incidents.
• Ensure the consistent application of security standards across the global technical infrastructure.
• Security Engineering and Operations
• Establish processes to respond in a timely and proactive manner to significant information security breaches.
• Monitor, manage and deploy security controls as appropriate to support business needs while minimising risk.
• Respond appropriately to investigations and forensic requests, managing situations with discretion, sensitivity, and objectivity, and with due consideration of chain-of-custody.
• Ensure that processes are in place and that staff is appropriately skilled to respond to security incidents.
• Lead the effort to maintain an effective and timely program to manage identity and access privileges.

Reporting to:

Chief Information Officer