HoD: IT Security, Governance, Risk and Compliance at Bayport Financial Services

• The Head of IT Security and GRC is responsible for overseeing the organisation's information security program and ensuring compliance with governance, risk management, and regulatory requirements. This senior leadership role will develop and implement a comprehensive security strategy, manage a team of IT security and GRC professionals, and work closely with various departments to minimize risks and protect the organisation from potential security threats. The Head of IT Security and GRC will also be responsible for driving a security-aware culture and maintaining a strong governance framework throughout the organisation.

Requirements
EDUCATION
MINIMUM QUALIFICATIONS

• Bachelor’s degree in computer science, Information Technology, or a related field

DESIRED/ PREFERRED REQUIREMENTS

• Masters Degree
• CISSP, CISM, CISA

EXPERIENCE AND KNOWLEDGE

MINIMUM REQUIREMENTS

• A minimum of 10 years of experience in information security, with at least 5 years in a management/leadership role.
• A minimum of 7 years of experience in a technical or specialist information security role.

INDUSTRY EXPERIENCE

• Financial industry preferred
• Exposure to it Strategic Planning and Implementation
• Sourcing and managing suppliers

DESIRED/ PREFERRED REQUIREMENTS

• In-depth knowledge of IT security principles, best practices, and industry standards, including experience with regulatory compliance (e.g., POPIA, GDPR, HIPAA, ISO 27001).
• Demonstrated ability to manage a team of IT security professionals, and effectively collaborate with stakeholders at all levels of the organisation.
• Strong analytical and problem-solving skills, with the ability to identify risks and develop effective mitigation strategies.
• Excellent communication and interpersonal skills, with a proven track record of building trust and credibility across the organisation.
• Experience with IT security tools and technologies, such as firewalls, intrusion detection/prevention systems, encryption, and identity/access management.
• Familiarity with cloud security principles and experience managing security in cloud-based environments.
• Strong project management skills, with the ability to prioritize and manage multiple tasks simultaneously.
• A high degree of professionalism, integrity, and commitment to maintaining the confidentiality of sensitive information.