Skip to content

Open nowFirst seen 4 days ago

Chief Information Security Officer

Boardroom Appointments3,354 open roles

Where
Randburg, GP, South Africa
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowChief Information Security OfficerBoardroom Appointments · Randburg, GP, South Africa
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Boardroom Appointments's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.3%14 days
  5. 35.6%30 days
  6. 57.8%60 days
This job: first seen 4 days ago

The posting

Minimum Requirements:

  • 8 to 12 years experience
  • Relevant post graduate degree

Experience in:

  • Both local and global information security
  • Information Security Architecture
  • Information Security Audit
  • Advisory and Consulting
  • IT and Cyber-Security Management
  • Cyber Analytics
  • Vulnerability Management
  • Access Governance, IT and Security Governance, Data Privacy
  • Systems Risk Management and ICT Compliance Management
  • Security Intelligence
  • Security Threat and Risk Analytics
  • Access Governance
  • Threat and Vulnerability Assessment
  • Security Information and Event Management
  • Security Architecture, Strategy and Operating Models

Responsibilities:

  • Responsible for the management of the cyber information security operation.
  • Evaluates and matures cybersecurity procedures and capabilities, enhancing the operating and flow methods of the function.
  • Leads community consciousness, change and communication projects, and ensure that there is an effective staff training programme to enhance the organisation's security culture.
  • Reviews metrics and reporting for financial and risk management.
  • Prevents significant reputational, financial or other loss to the organisation through the efficient and effective application of cyber information security expertise.
  • Leads a global approach to adopting cybersecurity best practices through effective collaboration with technical, business and industry forums.
  • To address the risk management of the cybersecurity environment and the definition and maintenance of cybersecurity policy and to contain the organisation's cybersecurity risk profile within acceptable parameters thereby achieving the groups risk appetite and enabling the statutory risk management responsibilities of the the company and the Board.
  • Definition, creation and socialisation of long-term strategic direction and broad strategic frameworks and targets to deliver shareholder value for the company
  • Ensure that there are appropriate structures, processes, policies, standards, governance and controls in place for effectively managing cybersecurity, and hold stakeholders to account.
  • Determine and procure the requisite budget required to deliver the cybersecurity strategy and manage costs / expenses within approved budget to achieve cost efficiencies.
  • To provide all the relevant stakeholders with the assurance that the identification, management and treatment of cybersecurity risks within organisation's systems are being effectively addressed to minimise operational losses, customer impact, service disruption, regulatory and reputational impact.
  • From time to time, provide training, reporting and other ad-hoc responses to specific requests to company Board and governance committees.
  • To give direction to the introduction of cybersecurity across the company and to ensure that effective systems are in place to support policy requirements by providing business units with an information security consultancy service.
  • To liaise and participate on a high level in the IT architecture board and IT Exco and to get involved in the Systems Development Life Cycle of IT systems at an early stage to incorporate information security as an integral part of the system.
  • Represent the company at regulatory and key industry cybersecurity bodies and play a pivotal role in advancing industry position and direction on key issues without prejudice to the company
  • To manage the cybersecurity environment within the company with regard to areas that the organisation manage on behalf of segments, supported by Service Level Agreements
  • Provide access control mechanisms and participate in the management of company access control to systems through a systems to that performs authentication, authorisation, confidentiality, integrity and availability of data and resources and ensuring that the company is adequately protected against loss of confidentiality, integrity and availability of information
  • To ensure that an cybersecurity framework exists for the company and to ensure that Information Security Services has a mandate from executive management to perform its duties.
  • Ensure that cybersecurity products, both hardware and software, fully support the security strategy and policies of the company
  • To manage the cybersecurity investigations and security breaches in the company and assist with group investigations into fraud related matters
  • Monitor access controls and security violations in the mainframe and midrange environment by monitoring data leakage at gateway and endpoint and ensure that data is secured and monitoring system logs to identify potential threats and for usage in investigation
  • To identify, define and maintain the cybersecurity policy and base line standards for the company and to implement group information security policies across the company that will determine the necessary standards and procedures exists to support the policy ,and to ensure that all information security risks are minimised and controlled in a manner which satisfies the statutory, business and risk management requirements of the company
  • To create a cybersecurity risk awareness program for the company and to ensure that staff are aware of cybersecurity risks and carry out monitoring programs in all areas to identify vulnerabilities, non-compliance and poor performance against base lines by participating.
  • Implementing control mechanisms, which enables I&SS to have a view of the status of cybersecurity
  • To develop and implement an cybersecurity strategy that both hardware and software fully support the cybersecurity strategy and policies
  • Further ensure that the strategy is implemented via action plans supported by operational plans which support statutory, business and risk requirements.
  • Ensure regular groupwide collaboration with the segments and subsidiaries respective cybersecurity leads in building the strategy and plans for cybersecurity.
  • Execute the Business Unit people strategy that nurtures talent and embraces the values, culture and philosophy of entrepreneurship, accountability and innovation in order to meet current and future business needs.
  • Hold direct reports accountable for the implementation of Leadership Strategy that drive behaviour towards high performance through succession planning, coaching and competency development
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Boardroom Appointments's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Boardroom Appointments's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Boardroom Appointments's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.