Requisition Number and Talent Acquisition ContactREQ: 134658
Closing Date: 14 November 2024
PositionBusiness Information Security Officer
Job PurposeThe BISO must support the business cluster in the implementation and execution of the cyber resilience risk management framework that includes implementation of cyber risk assessments, strategy, cyber security programme, policies, standards, reporting of all cluster-specific cyber security programme elements and regulatory matters as it relates to cyber security.
Job ResponsibilitiesBuild and maintain professional relationships by information sharing and professional networking within the bank.Build and maintain internal stakeholder relationships through collaboration with stakeholders and regular communication via various media.Drive compliance to security policies and standards on cluster infrastructure.Primary interface between the cluster and CISO office.Represent business as an information security representative on the CSSC.Ensure alignment and implementation of CRRMF in clusters.Report of all cluster specific information security program elements.Work closely together with all stakeholders.Actively execute the cyber security programme elements and other information and cyber security plans developed by the business.Assist the cluster with identification of critical assets ("crown jewels") and feeding that back into the business impact analysis and risk management processes.Work with the business to develop processes and procedures to ensure information security policies and standards are integrated.Assist with third party supplier information and cyber security risk assessments and assurance.Assist business with incident management related to cyber and/or privacy incidents.Conclude cyber / privacy impact assessment on new business initiatives.Conduct assurance testing on cyber/IT related controls.Assist with the development, review and maintenance of RCSA and KRI's for the portfolio.Essential Qualifications - NQF LevelMatric / Grade 12 / National Senior CertificateAdvanced Diplomas/National 1st DegreesPreferred QualificationCertified Information Security Manager (CISM)Certified in Risk and Information Systems Control (CRISC)Certified Information Systems Auditor (CISA)Certified Information Systems Security Professional (CISSP)Technical SpecificationMust be able to create and update Power BI dashboards.
Minimum Experience Level3 - 5 years in Information Security ExperienceExposure in Risk Management MonitoringTechnical / Professional KnowledgeAdministrative procedures and systemsData analysisGovernance, Risk and ControlsPrinciples of project managementRelevant regulatory knowledgeRelevant software and systems knowledgeCluster Specific Operational KnowledgeSystem Development Life cycle(SDLC)TCP/IPInformation Security terms and definitionsInformation Security policies and proceduresCommunicationCustomer FocusInitiating ActionManaging WorkTechnical/Professional Knowledge and SkillsDisclaimerPreference will be given to candidates from the underrepresented groups
#J-18808-Ljbffr