Executive Head: GT Functional Area at Nedbank

Job Responsibilities

• Lead and manage the Information Security team, ensuring effective performance and development. 
• Oversee the virtual security operations centre and ensure continuous monitoring and protection of the Bank’s digital assets.
• Develop and implement strategies for threat detection, investigation, and incident response.
• Manage security incident and event management (SIEM) systems to ensure timely detection and response to security incidents.
• Ensure robust network security, including email and web security, firewalls, and other protective measures.
• Oversee cloud security initiatives to protect data and applications hosted in cloud environments.
• Implement data loss prevention strategies to safeguard sensitive information.
• Conduct threat and vulnerability assessments and manage remediation efforts.
• Oversee cryptographic solutions to protect data integrity and confidentiality.
• Ensure secure application design and development practices.
• Manage privileged access to critical systems and data.
• Oversee endpoint detection and response, antivirus solutions, and active directory security.
• Engage with stakeholders across the Bank to promote and integrate cybersecurity practices.
• Stay current with emerging security trends, threats, and technologies, including artificial intelligence, automation, and DevSecOps.

Qualifications and Experience

• Bachelor’s degree in Information Security, Computer Science, or related field. A Master’s degree is preferred.
• Professional certifications such as CISSP, CISM, or CISA.
• Minimum of 10 years of experience in information security, with at least 5 years in a leadership role.
• Strong knowledge of security operations, threat detection, and incident response.
• Excellent leadership and communication skills.
• Proven ability to manage stakeholders and drive cybersecurity initiatives.
• Proven experience in managing and developing a high-performing team.
• Familiarity with emerging technologies such as artificial intelligence, automation, and DevSecOps.