Government Employees Medical Scheme (Gems) Vacancies

In brief

**Overview** The Government Employees Medical Scheme (GEMS) is seeking a Senior Manager: ICT Security to lead its information security function. This is a permanent, full-time position based at GEMS' Head Office in Pretoria, operating under a hybrid work model. The incumbent will report directly to the Chief Information Officer and will be responsible for overseeing the organization's cybersecurity strategy, governance, risk management, compliance, incident response, and security operations. The role requires strong senior-level experience in information security management. The annual total cost to company package for this role ranges between R1,613,106 and R2,016,382, dependent on the candidate’s skills and experience and aligned with the Scheme’s Remuneration Policy. **What you will do** The Senior Manager: ICT Security will be responsible for: * Providing strategic and operational leadership for the enterprise information security function, ensuring the ongoing confidentiality, integrity, and availability of GEMS information assets. * Establishing and maintaining the ICT Security Framework, governance structures, and enterprise security architecture. * Leading enterprise initiatives for cybersecurity policy, standards, and awareness across on-premise, cloud, and hybrid environments. * Overseeing security operations, including incident detection, response, monitoring, and vulnerability management. * Ensuring compliance with applicable legislation, including POPIA, the Medical Schemes Act, King IV, ISO 27001, and internal risk and audit frameworks. * Managing business continuity and disaster recovery planning, testing, and the integration of cyber resilience measures. * Overseeing security solution acquisition, deployment, and lifecycle management to mitigate technology, operational, and compliance risks. * Managing security budgets, vendor and contract performance, and third-party risk assessments. * Providing regular reporting, metrics, and briefings to Executive Management and relevant governance committees on the organization’s security posture. * Leading and developing the information security team to ensure performance excellence, readiness, and continuous improvement through training, drills, and development plans. * Collaborating with internal and external stakeholders including ICT, Risk, Audit, Legal, service providers, and regulators to support business-aligned, secure operations. **Requirements (from the original advert)** * **Qualifications:** * A Bachelor’s degree or Advanced Diploma in Computer Science, Information Security, Information Systems, or a related field. * A postgraduate qualification in Cybersecurity, IT Governance, or Business (advantageous). * Professional certifications (preferred): CISSP, CISM, CISA, GIAC, CCSP, or ISO 27001 Lead Implementer/Lead Auditor. * **Experience:** * A minimum of 8 years’ functional experience in Information Security, with at least 5 years in a managerial role leading security teams. * Demonstrated experience in enterprise security governance, architecture, risk management, SOC operations, and incident response. * Strong understanding of network and cloud security (Azure/AWS), POPIA, and cyber risk frameworks (ISO 27001, NIST CSF). * Experience engaging with executive committees, audit processes, and security assurance programs. * **Skills:** * Strong leadership, analytical, and strategic planning capability. * Excellent business and technical acumen with deep understanding of cybersecurity principles. * Proven ability to implement and govern secure‑by‑design practices. * Effective stakeholder management and communication at senior levels. * Demonstrated problem‑solving, risk assessment, and decision‑making skills. * High level of resilience and adaptability when managing incidents under pressure. * Excellent report‑writing, presentation, and documentation control skills. * **Behavioural Competencies:** * Integrity, Accountability, Strategic Thinking, Collaboration, Decision-Making, Innovation, Resilience, Service Orientation, People Development. * **Desirable:** * Experience within a medical scheme, financial services, or other regulated industry. * Practical exposure to security audits, BCP/DR exercises, and compliance assurance. **Who should apply** This role is suitable for a highly experienced Information Security professional demonstrating strong leadership and strategic capabilities, with a proven track record in managing security teams and enterprise-level security functions. The ideal candidate will have extensive experience in security governance, architecture, risk management, SOC operations, and incident response, coupled with a deep understanding of network and cloud security, POPIA, and cyber risk frameworks. Candidates should possess resilience, adaptability, effective stakeholder management skills at senior levels, and align with GEMS' defined behavioural competencies. Individuals who meet the specific qualification and experience requirements and are prepared to undertake pre-employment assessments are encouraged to apply. GEMS gives preference to groups underrepresented in accordance with its employment equity plan. Internal candidates must have been in their current role for a minimum of 12 months to be considered. **Deadline** Friday, 13 November 2026 **Reference** Original posting: https://www.govpage.co.za/vacancies/government-employees-medical-scheme-gems-vacancies-13 Source: govpage

Summary drafted with AI assistance from the original advert. The advert itself is the authority — how we use AI.

At a glance

• At least 8 years of experience.

• AWS
• Azure

Extracted automatically from the advert; confirm requirements on the original listing.

Job description

Before you apply

• Confirm the requirements and closing date on the original listing (govpage). SPANi lists vacancies from other sites and may not reflect last-minute changes.
• Legitimate employers do not charge application, registration or training fees.
• Don't send your ID or bank details before you have confirmed the employer is real.

How to spot a job scam

Before you apply

• Read the full advert and confirm you meet the minimum requirements before applying.
• Tailor your CV headline and most recent experience to the job title and key skills.
• Note the closing date and reference number, and keep a copy of what you submit.
• Apply only through the employer or job board link — never pay to apply.