Chief Information Security Officer

My Career Development Portal: Wherever you are in your career, we are here for you. Design your future. Discover leading-edge guidance, tools and support to unlock your potential. You are Absa. You are possibility.

Job Summary

• Oversee and implement the Bank’s cybersecurity programme and enforce cyber/technology policies.

• Ensure alignment of ICT strategy, systems development, and security controls with business objectives, risk appetite, and regulatory requirements.

• Design and maintain enterprise-wide cybersecurity controls for internal and external users.

• Review and approve exceptions to cybersecurity policies, ensuring risks remain within acceptable thresholds.

• Define and communicate clear roles and responsibilities for cyber risk management.

·       Conduct comprehensive cyber risk assessments at least annually.

·       Ensure continuous monitoring of IT systems to detect and respond to cyber threats and incidents in a timely manner.

·       Perform scenario analysis to identify vulnerabilities and control gaps.

·       Report quarterly (or as required) to Executive Director on security posture, incidents, policy exceptions, and programme effectiveness.

·       Safeguard confidentiality, integrity, and availability (CIA) of information assets.

·       Maintain and regularly update incident response and Business Continuity Plans (BCP) based on threat intelligence.

·       Oversee disaster recovery testing and ensure operational resilience during cyber incidents.

·       Ensure robust data backup processes for critical systems.

·       Determine the people management strategy for the business unit aligned to the overall business strategy

·        Take steps to build, develop and lead a cohesive and high performing leadership team within the business unit

·       Drive the overall people agenda within the business unit to ensure that the human aspects to performance are considered and embedded in the business

·       Take steps to establish and drive a high performance culture across the business unit by for example mentoring leaders and using the performance development framework informal coaching and formal learning as tolls

·        Enable and drive transformation agenda in the business unit by implementing strategies

·       Inspire and motivate people to achieve their potential by driving the values

• A Bachelor’s degree in Cybersecurity, Information Technology, Computer Science or a related field from an accredited University

• Certified Information Systems Security Professional (CISSP) Certificate, Certified Information Security Manager or any relevant Cybersecurity certifications

• Master’s degree in a related field is an added advantage

• Minimum 10 year working experience in IT and Cyber Security Management with at least 5 years at Senior management in the banking sector.

• Knowledge of General IT Controls

• Knowledge and experience with COBIT, ITIL, ISO 2700/NIST

• Experience in network and IT infrastructure management

• Knowledge of Risk Management principles and practices (Solid)

• Comprehensive understanding of critical IT domains including system administration, software development and networking and database administration

• Understand the IT service delivery within a corporate environment

• Ability to influence decisions with ability to lead strategy on future initiatives.

• Strong Computer skills and other Analytical tools

• Very strong communication skills, both verbal and written

• Excellent planning & organization skills

• Strong ability to view issues from a risk & control perspective

• Ability to work well under pressure, working accurately with attention to detail, and meeting deadline

Education