Information Security Officer

In brief

**Overview** This role is for an Information Security Officer at Sought Out Talent. The position involves a comprehensive leadership role in developing, maintaining, and enforcing the company’s enterprise information security and cybersecurity strategy, governance, risk management, and compliance across all technology domains. **What you will do** * Lead the development and maintenance of the company’s enterprise information security and cybersecurity strategy, roadmap, operating model, and maturity plan, ensuring alignment with IT strategy, business priorities, risk appetite, and regulatory obligations. * Establish, maintain, and enforce information security policies, standards, procedures, minimum control requirements, and governance practices across the organisation. * Identify, assess, prioritise, monitor, and report cyber and information security risks across applications, infrastructure, cloud services, operational technology, data platforms, third parties, and business processes. * Align with the enterprise architect regarding cloud adoption, network segmentation, identity and access management, data protection, application security, operational technology, and digital transformation initiatives. * Direct the oversight of security operations, ensuring effective monitoring, detection, vulnerability management, endpoint protection, security event management, threat intelligence, and operational security controls across the IT environment. * Own and coordinate cyber incident response governance, escalation, investigation, containment, recovery, lessons learned, and executive communication processes in line with company’s incident response arrangements. * Drive Governance, Risk and Compliance by ensuring adherence to internal policies, legal, regulatory, contractual, audit, data protection, and governance requirements relating to information security and cyber risk. * Strengthen Identity, Access and Data Protection Controls by overseeing access governance, privileged access, segregation of duties, data loss prevention, information classification, encryption, retention, auditability, and monitoring controls. * Manage Third-Party and Supply Chain Security Risk by defining and monitoring security requirements for vendors, service providers, cloud platforms, implementation partners, outsourced IT services, and technology suppliers. * Promote Security Awareness and Culture by leading cybersecurity awareness, training, communication, phishing readiness, policy adoption, and behavioural change initiatives across the organisation. * Provide Executive and Board-Level Reporting on security posture, cyber risks, incidents, vulnerabilities, compliance status, control gaps, remediation progress, and investment requirements to IT leadership and governance forums. * Support Audits and Assurance Reviews by coordinating security evidence, audit responses, control testing, remediation tracking, and continuous improvement activities arising from internal and external reviews. * Lead Cybersecurity Capability Development, including building, mentoring, and coordinating internal and external cybersecurity resources such as cyber risk, security operations, security architecture, GRC, and specialist provider capabilities. * Attend to audit queries as and when required. * Perform ad hoc duties as and when required within reasonable job scope. **Requirements (from the original advert)** * Bachelor’s Degree in Information Security or Computer Science or Information Technology or Information Systems, or a related discipline. * Relevant Information Security or Cybersecurity certification. * 8 – 10 years’ experience in Information Security, Cybersecurity, IT Risk Management, IT Governance, Infrastructure Security, Security Operations, or related technology disciplines. * Experience in information security governance, risk management, and compliance practices. * At least five (5) years’ experience in a cybersecurity leadership, management, or senior specialist role. * Proven experience developing and implementing information security strategies, frameworks, policies, standards, and governance processes. * Experience conducting cybersecurity risk assessments, security audits, compliance reviews, and control effectiveness evaluations. * Experience managing security incidents, vulnerability management programmes, and cybersecurity monitoring activities. * Experience implementing and maintaining information security controls across infrastructure, applications, cloud environments, data platforms, and operational technology environments. * Experience engaging with executive leadership, auditors, regulators, technology teams, and business stakeholders on cybersecurity matters. **Who should apply** This role is suitable for a highly experienced information security professional with a Bachelor's degree in a relevant field and a cybersecurity certification. The ideal candidate will have 8-10 years of experience in information security, cybersecurity, or related IT disciplines, including at least five years in a leadership or senior specialist capacity. Applicants should possess proven expertise in developing security strategies, managing governance, risk, and compliance, overseeing incident response, implementing security controls, and engaging with diverse stakeholders at all organizational levels. **Deadline** Not specified **Reference** Original posting: https://www.myjobmag.co.za/job/information-security-officer-sought-out-talent Source: myjobmag

Summary drafted with AI assistance from the original advert. The advert itself is the authority — how we use AI.

At a glance

• At least 8 years of experience.

Extracted automatically from the advert; confirm requirements on the original listing.

Job description

Before you apply

• Confirm the requirements and closing date on the original listing (myjobmag). SPANi lists vacancies from other sites and may not reflect last-minute changes.
• Legitimate employers do not charge application, registration or training fees.
• Don't send your ID or bank details before you have confirmed the employer is real.

Also listed on: myjobmag, myjobmag, myjobmag, myjobmag.

How to spot a job scam

Before you apply

• Read the full advert and confirm you meet the minimum requirements before applying.
• Tailor your CV headline and most recent experience to the job title and key skills.
• Note the closing date and reference number, and keep a copy of what you submit.
• Apply only through the employer or job board link — never pay to apply.