Principal Specialist: Cyber Security at Paracon

About the job

• Develop and manage a 3-5-year cyber security strategy for VFS & DLS.
• Evaluate and update cyber security policies to ensure compliance and effectiveness.
• Lead cyber security incident response planning and execution.
• Maintain cyber risk registers and manage audit compliance and remediation.
• Promote cyber awareness and security governance across all business units.
• Design and track cyber risk metrics, reporting tools, and security controls.
• Collaborate with senior stakeholders to drive cyber security initiatives.

Desired Skills and Experience

• The Specialist for Cyber Security at Vodacom VFS & DLS is responsible for leading the development, implementation, and oversight of cybersecurity strategies, policies, and risk management for the financial services, insurance, and lending sectors. This senior-level role requires deep cybersecurity expertise, strategic thinking, stakeholder engagement, and leadership to ensure compliance, mitigate risks, and maintain robust security postures.

Key Responsibilities:

• Develop and manage a 3-5-year cyber security strategy for VFS & DLS.
• Evaluate and update cyber security policies to ensure compliance and effectiveness.
• Lead cyber security incident response planning and execution.
• Maintain cyber risk registers and manage audit compliance and remediation.
• Promote cyber awareness and security governance across all business units.
• Design and track cyber risk metrics, reporting tools, and security controls.
• Collaborate with senior stakeholders to drive cyber security initiatives.

Required Skills & Experience:

• Bachelor's degree in IT or related field.
• 8+ years in cybersecurity roles, including governance, IT audit, risk, and compliance.
• Expertise in frameworks such as ISO 27001, NIST, COBIT, ITIL, SOC 2, PCI-DSS.
• Deep knowledge of technical security controls (firewalls, IDS/IPS, encryption, etc.).
• Experience in cloud security, web app security, and enterprise architecture.
• Strong leadership, communication, and stakeholder management skills.

Preferred Certifications:

• CISSP, CISM, CISA, CRISC, CGEIT, ISO 27001 Lead, or similar.

Performance Indicators:

• Compliance rate with regulations (FSCA, PCI, etc.).
• Reduction in incidents, risks, and vulnerabilities.
• Success rates in phishing simulations and awareness training.
• Audit success and remediation efficiency.