Director: Departmental Information Security Officer (DISO) at Department of Water and Sanitation

Requirements

• A tertiary qualification (SAQA NQF level 7) in Computer Science or Information Technology. Certified Information System Security Professional (CISSP) and/or Certified Information Security Manager (CISM). Five (5) years’ experience in cyber security environment at middle/senior management level.
• Successful completion of the Pre-entry Certificate for SMS as endorsed by the National School of Government. Knowledge of information and cybersecurity models and frameworks. Knowledge and understanding of relevant legal and regulatory requirements. Knowledge of business ecosystems and business management principles.
• Knowledge and understanding of network connectivity. Knowledge and understanding of relevant quality standards and procedures (e.g. ISO 9001). Knowledge and understanding of relevant security standards and frameworks (e.g. NIST, ISO 27001). Knowledge of policy development and implementation.
• Understanding financial management and knowledge of PFMA. Knowledge of project management principles and practices. Knowledge of analytical procedures, strategic capability and leadership. People management and empowerment.
• Understanding of corporate governance principles. Problem solving and analysis. Client orientation and customer focus. Accountability and ethical conduct. Excellent communication skills (both verbal and written).

Duties

• Lead, develop, implement and manage the information and cybersecurity program as the Departmental Information Security Officer (DISO). Manage the ICT risk management functions to support the overall Departmental Risk Management framework.
• Facilitate cyber and information security governance through policy development, standards implementation, awareness programs, and regular reporting to oversight structures.
• Implement and manage a cybersecurity and data privacy framework, such as NIST, ensuring comprehensive reporting on identity, protection, detection, response, and recovery. Develop, implement, and manage ICT business continuity and disaster recovery processes.