Chief Enterprise Architecture Services: Cyber and Information Security

SUMMARY:
Chief Enterprise Architecture Services- Cyber and Information Security

POSITION INFO:
Enterprise Architecture & Cybersecurity Integration • Embed cybersecurity as a foundational component of enterprise architecture across all solution design and operational governance. • Retain strict internal ownership of solution design and security architecture, ensuring central IT governance and preventing vulnerabilities in grid-critical systems • Design and maintain security architectures that balance IT and OT requirements, including network segmentation, cyber-physical systems protection platforms, and real-time monitoring capabilities 2. IT\/OT Alignment & Fusion Leadership • Lead the IT\/OT solution architecture function, collaborating with the Chief Information Officer and other stakeholders to define roles, responsibilities, and fusion team structures that blend IT and OT expertise • Translate IT culture into operational technology environments and vice versa, bridging the technical, cultural, and process divides between traditionally separate IT and OT functions • Oversee technical integration of IT and OT systems, ensuring interoperability, unified security protocols, and seamless operational continuity. 3. Cybersecurity Policy & Governance • Establish unified IT\/OT security policies, standards, and compliance frameworks aligned with regulatory requirements specific to energy infrastructure (e.g., NERC CIP) • Define and enforce security zoning, asset inventory management, and continuous monitoring practices adapted to both IT and OT operational constraints • Embed compliance-by-design, automated regulatory reporting, auditability, and digital trust mechanisms into the operating model to meet NERSA and international compliance demands 4. Cyber-Physical Systems Security • Ensure specialized understanding of how cyber-physical systems operate, including prioritization of availability over confidentiality in real-time grid operations • Navigate operational constraints governing when security interventions can safely occur, balancing continuous system availability, safety during cyber incidents, and effective protection measures without disrupting critical physical process control • Design security architectures adapted to the long lifespan of OT assets, proprietary industrial protocols, and the safety implications tied to both cybersecurity and digital system failures. Risk Governance, Incident Management & Business Alignment • Lead cross-functional coordination between cybersecurity, IT operations, and business units, ensuring risk prioritization is driven by business impact and operational context Qualification Minimum: relevant B Degree, B Tech, Advanced Diploma or National Higher Diploma at NQF Level 7 in Information Technology, Information Systems, Computer Science, Information Management, Cyber Security, Engineering or related discipline. Experience Minimum 7 years of relevant IT, IS, IM or OT architecture experience, including demonstrated cyber\/information security architecture delivery. Leadership level Evidence of independently leading complex architecture assignments and advising senior or executive stakeholders. Professional certifications Preferred: TOGAF, SABSA, CISSP, CISM, CCSP, ISO 27001 Lead Implementer\/Auditor, GIAC, IEC 62443 or equivalent relevant certification. Sector experience Preferred: energy, utilities, critical infrastructure, industrial environments or other highly regulated enterprise. rather than technical criteria alone