Information Security Lead

SUMMARY:

POSITION INFO:
Key Responsibilities: Information Security Strategy & Governance Develop and execute the information security strategy and roadmap aligned to business objectives. Own and maintain security policies, standards, and procedures. Ensure alignment with recognised frameworks such as ISO 27001, NIST CSF, and CIS Controls. Provide regular reporting on security posture, risks, and programme progress to executive leadership. Risk Management & Compliance Lead information security risk assessments and maintain the risk register. Manage internal and external security audits and remediation activities. Oversee third-party and supplier security risk assessments. Drive compliance with relevant regulatory and security requirements, including POPIA. Security Operations Provide strategic oversight of Security Operations Centre (SOC) activities. Monitor performance against security KPIs, SLAs, MTTD, and MTTR targets. Ensure threat intelligence and threat-hunting initiatives strengthen detection and response capabilities. Drive continuous improvement across the security operations function. Incident Response & Crisis Management Lead the response to major security incidents. Own and continuously enhance the incident response programme. Ensure root cause analyses are completed and improvements implemented. Coordinate communication with stakeholders, clients, and regulators when required. Vulnerability & Threat Management Oversee the vulnerability management programme. Ensure critical vulnerabilities are remediated within agreed timelines. Collaborate with IT and application teams to prioritise remediation activities. Strengthen proactive threat management practices across the environment. Leadership & Stakeholder Engagement Lead, mentor, and develop the security team. Act as the senior escalation point for information security matters. Partner with business leaders, clients, and vendors to drive security initiatives. Foster a culture of security awareness throughout the organisation. Job Experience and Skills Required: Bachelor's Degree in Computer Science, Information Technology, Information Systems, Cyber Security, or a related field. CISSP, CISM, or CISA certification. 7+ years of experience in Information Security or Cyber Security. 3+ years in a leadership role managing security teams or functions. Proven experience overseeing a Security Operations Centre (SOC). Strong incident response leadership experience. Apply now! For more exciting IT vacancies, please visit: \/> I also specialise in recruiting in the following: Software Developers Mobile Developers Business and Systems Analysts BI and SQL Experts Data & Analytics (Data Scientists, Data Analysts, Python, R, SQL, Machine Learning) AI & Automation (Artificial Intelligence, Machine Learning, Intelligent Automation, and Process Automation Solutions). If you have not had any response in two weeks, please consider the vacancy application unsuccessful. Your profile will be kept on our database for any other suitable roles \/ positions. For more information, contact: Lameez Mohamed Specialist Recruitment Consultant Connect with me on LinkedIn!