Information Security Officer

SUMMARY:
Are you a cybersecurity leader passionate about protecting enterprise environments and driving security strategy? This is a unique opportunity to take ownership of information security, cyber risk management, and governance initiatives within a complex enterprise environment while influencing business-critical technology and security decisions.

POSITION INFO:
Join a leading enterprise environment where information security is a strategic business priority. As the Information Security Officer, you will be responsible for leading and continuously improving the organisation's cybersecurity, governance, risk, and compliance capabilities while ensuring the protection of critical business systems, data, cloud platforms, and operational technology environments. This role offers the opportunity to shape cybersecurity strategy, influence executive-level decision-making, and drive enterprise-wide security maturity initiatives. You will work closely with technology teams, business leaders, auditors, and stakeholders to strengthen security controls, manage cyber risks, and ensure compliance with regulatory and governance requirements. If you are passionate about cybersecurity leadership, risk management, and building resilient organisations, this is an outstanding opportunity to make a significant impact. Key Responsibilities: Develop and execute the enterprise information security and cybersecurity strategy Establish and maintain security policies, standards, and governance frameworks Identify, assess, monitor, and report cyber and information security risks Provide oversight of security architecture, secure design, and digital transformation initiatives Lead cybersecurity operations, including threat monitoring, vulnerability management, and security controls Coordinate cyber incident preparedness, response, recovery, and reporting activities Drive governance, risk, compliance, and audit initiatives across the organisation Manage identity, access management, and data protection controls Oversee third-party and supply chain cybersecurity risk management Lead security awareness, training, and organisational culture initiatives Report on cybersecurity posture, risks, vulnerabilities, and remediation activities to executive leadership Job Experience and Skills Required: Education: Bachelor's Degree in Information Security, Computer Science, Information Technology, Information Systems, or a related discipline Preferred Qualifications: Postgraduate qualification in Information Security, Cybersecurity, Risk Management, Business Management, or related field CISSP (Certified Information Systems Security Professional) CISM (Certified Information Security Manager) Experience: 8-10 years' experience in Information Security, Cybersecurity, IT Risk Management, IT Governance, Security Operations, or related disciplines Minimum 5 years' experience in a cybersecurity leadership, management, or senior specialist role Experience developing information security strategies, frameworks, policies, and governance processes Experience conducting security risk assessments, audits, compliance reviews, and control evaluations Proven experience managing security incidents, vulnerability management programmes, and security monitoring functions Experience engaging with executive stakeholders, auditors, technology teams, and regulators Technical Skills: Information Security Governance and Risk Management Cybersecurity Operations and Incident Response Security Architecture and Secure Design Identity and Access Management Cloud Security and Infrastructure Security Data Protection and Compliance Management Third-Party Risk Management Audit and Regulatory Compliance Additional Requirements: Strong analytical and problem-solving abilities Excellent communication and stakeholder engagement skills Strong leadership and decision-making capabilities Ability to operate effectively under pressure and within complex environments Continuous improvement mindset and strong attention to detail Apply now! For more exciting IT vacancies, please visit: I also specialise in recruiting in the following: Data Engineer Software Developer Data Analyst Infrastructure Architecture …and more! If you have not had any response in two weeks, please consider the vacancy application unsuccessful. Your profile will be kept on our database for any other suitable roles \/ positions. For more information, contact: Karmishka Naidoo Specialist Recruitment Consultant Connect with me on LinkedIn!