Chief Information Security Officer - Randburg

In brief

**Overview** The Chief Information Security Officer (CISO) at Absa Group Limited is a key executive role accountable for establishing, leading, and continuously enhancing the organisation's enterprise cyber security and information security capabilities. This position is responsible for protecting the confidentiality, integrity, and availability of Absa's information assets, digital platforms, technology infrastructure, and customer services. The CISO provides strategic leadership and executive oversight across critical security domains including cyber risk management, cyber defence, security operations, security engineering, cyber resilience, identity and access management, threat intelligence, and regulatory compliance. As a member of the Information & Technology Office (ITO) Executive Committee, the CISO works closely with business and technology leaders to embed security into business strategy and operational decision-making, providing crucial assurance to the Board, executive management, regulators, customers, and other stakeholders that Absa maintains an effective cyber security posture. The role is pivotal in enabling innovation and digital growth while ensuring appropriate protection against cyber threats, operational disruption, reputational damage, and financial loss. **What you will do** * Define, maintain and execute Absa's enterprise-wide cyber security strategy and operating model. * Develop a multi-year cyber security roadmap aligned to business objectives, technology transformation initiatives and regulatory requirements. * Establish cyber security as a strategic business enabler that supports innovation, digital adoption and customer trust. * Provide thought leadership on emerging cyber threats, industry trends and evolving regulatory requirements. * Advise Executive Committees, Risk Committees and the Board on cyber security strategy, risk and resilience. * Establish and oversee the enterprise cyber risk management framework. * Ensure cyber risks are identified, assessed, quantified, prioritised and managed in alignment with the organisation's risk appetite. * Provide regular reporting on cyber risk exposure to executive management and governance forums. * Embed cyber risk management practices into business processes, technology change programmes and strategic initiatives. * Ensure effective management of third-party and supply chain cyber security risks. * Lead and continuously enhance the Security Operations Centre (SOC). * Oversee cyber threat monitoring, threat hunting, detection and response capabilities. * Ensure the effective identification, containment, investigation and remediation of cyber security incidents. * Maintain executive oversight of cyber incident response processes and major cyber event management. * Drive the adoption of intelligence-led cyber defence capabilities focused on proactive threat mitigation. * Develop and maintain enterprise cyber resilience and recovery capabilities. * Ensure appropriate cyber recovery strategies are implemented and regularly tested. * Partner with technology, infrastructure and business stakeholders to strengthen operational resilience against cyber disruption. * Maintain preparedness for significant cyber incidents through testing, simulation exercises and executive engagement. * Ensure lessons learned from incidents and exercises are incorporated into continuous improvement initiatives. * Establish enterprise security architecture principles, standards and patterns. * Ensure security controls are embedded within cloud, application, infrastructure and data environments. * Drive secure-by-design and secure-by-default practices across technology delivery teams. * Oversee the implementation and effectiveness of cyber security technologies and platforms. * Ensure security requirements are integrated throughout the software development lifecycle. * Establish and maintain enterprise identity and access management strategies. * Ensure effective governance and control of privileged access. * Drive the implementation of modern authentication, authorisation and identity security capabilities. * Ensure access controls align to regulatory, operational and security requirements. * Ensure compliance with all applicable cyber security regulations, industry standards and regulatory obligations. * Maintain effective relationships with regulatory authorities on cyber security matters. * Oversee independent security assessments, penetration testing, audits and capability reviews. * Provide executive assurance regarding the effectiveness of security controls and overall cyber security posture. * Ensure timely remediation of identified vulnerabilities, risks and control deficiencies. * Develop and maintain a strong cyber security culture across the organisation. * Promote accountability for cyber security at all levels of the business. * Drive enterprise-wide security awareness and education programmes. * Ensure employees understand their role in protecting information assets and customer data. * Position cyber security as a shared organisational responsibility. * Lead high-performing cyber security teams. * Establish a culture of accountability, innovation, excellence and continuous improvement. * Develop succession plans and talent strategies for critical cyber security roles. * Build and maintain a diverse pipeline of cyber security skills and leadership capabilities. * Foster strong collaboration across technology, risk, compliance and business functions. * Represent Absa at industry forums, regulatory engagements and cyber security working groups. * Build strategic relationships with industry peers, regulators, cyber security organisations and relevant external stakeholders. * Position Absa as a recognised leader in cyber security and cyber resilience within the financial services sector. **Requirements (from the original advert)** * **Essential:** * Bachelor's degree in Information Technology, Computer Science, Cyber Security, Information Systems, Engineering or a related discipline. * 15 years of progressive experience in cyber security, information security, technology risk or related fields. * 8-10 years' leadership experience managing large-scale cyber security functions within a complex organisation. * Demonstrated experience operating within highly regulated financial services or similarly regulated industries. * Proven experience engaging executive committees, boards and regulators on cyber security and technology risk matters. * Significant experience leading enterprise cyber transformation programmes. * **Preferred:** * Postgraduate qualification in Technology, Cyber Security, Business Administration or a related field. * MBA, MSc Information Security or equivalent advanced qualification. **Who should apply** This role is ideal for a highly experienced and strategic Chief Information Security Officer or a senior cyber security leader. The successful candidate will possess a proven track record of establishing and enhancing enterprise-wide cyber security capabilities within complex, highly regulated environments, preferably financial services. They must demonstrate exceptional leadership in managing large-scale security functions, driving cyber transformation, and effectively engaging with executive committees, boards, and regulatory authorities. A strong commitment to fostering a robust security culture, deep expertise across all facets of cyber security, and the ability to represent the organisation externally as a thought leader are essential. **Deadline** October 19, 2026 **Reference** Original posting: https://www.myjobmag.co.za/job/chief-information-security-officer-randburg-absa-group-limited-absa Source: myjobmag

Summary drafted with AI assistance from the original advert. The advert itself is the authority — how we use AI.

Job description

Before you apply

• Confirm the requirements and closing date on the original listing (myjobmag). SPANi lists vacancies from other sites and may not reflect last-minute changes.
• Legitimate employers do not charge application, registration or training fees.
• Don't send your ID or bank details before you have confirmed the employer is real.

How to spot a job scam

Before you apply

• Read the full advert and confirm you meet the minimum requirements before applying.
• Tailor your CV headline and most recent experience to the job title and key skills.
• Note the closing date and reference number, and keep a copy of what you submit.
• Apply only through the employer or job board link — never pay to apply.