Security Governance and Compliance Specialist

 

Recruiter:

PreBless Group

Job Ref:

ABBANK

Date posted:

Tuesday, September 14, 2021

Location:

Johannesburg, South Africa

Salary:

negotiable


SUMMARY:
Develop processes and procedures for the information security governance program and develop, coordinate and maintain the implementation of security policies and procedures across the Bank.

POSITION INFO:

Overview:

1 - Security Governance

  • Develop processes and procedures for the information security governance program.
  • Develop, coordinate and maintain the implementation of security policies and procedures across the Bank.
  • Ensure alignment of security governance with the Bank’s business objectives.

2 - Security Compliance Management

  • Ensure compliance with the applicable legislative and regulatory requirements.
  • Monitor and measure compliance with Security policies.
  • Provide business support in audit activities.

3 - Security Management

  • Develop and optimize processes to improve security threat identification and remediation.
  • Monitor and manage emerging and existing threats and vulnerabilities to new and existing internal and external services.
  • Implement new security operational efforts and coordinating resources to ensure operational efficiency on technical security controls.
  • Participate in IT Continuity and Disaster Recovery process
  • Champion awareness of developing Information Technology and security risk landscape across the wider business.
  • Oversee highest risk initiatives and serve as a point of escalation for remediation/mitigation efforts.

4 - Collaboration

  • Represent African Bank as a backup on the relevant industry related security groups and initiatives (e.g. SABRIC CSIRT Workgroups).
  • Collaborate with IT technical teams across the business to deliver Security service improvements.

5 - Project Management

  • Provided end to end engagement on a wider range of security projects as a security technical SME including ensuring the governance and change control is enforced.
  • Perform project tasks within allocated timeframes.

6 - Treating Customers Fairly and Compliance

  • Create and maintain productive relationships with internal and external clients by providing advice and assistance.
  • Create understanding of the ‘real’ versus ‘perceived’ need through experience and expertise while complying with company polices legislation and regulations.
  • Keep the client informed about progress through written communication, telephone communications and/or face to face meetings.
  • Build a positive image by exceeding client expectations at all times.
    Treat internal and external customers fairly at all times.

    Identify topics of interest to the organisation relating to existing technology and processes.
    Prepare a proposal for research work.
    Research topics document the results and commit the output to a body of knowledge.
    Apply research findings to the analysis phase of upcoming initiatives.
    Apply research findings to ongoing implementation efforts.
    Apply research findings to planning for future initiatives.

    Continuous Improvement
    Create an innovative idea(s) or continuous improvement initiative(s) to enhance the security system.
  • Identify topics of potential interest to the organisation such as industry trends and state-of-the-art technology.

  • Minimum Education

    • Bachelor’s Degree in Computer Science, Information Technology, Computer Auditing or Internal Auditing
    • CISA, CISSP, CISM, CRISC or equivalent security professional qualification preferable

    Minimum Experience

    • 5+ years of experience working in professional information security role.
    • Broad information security knowledge across several security domains.
    • Experience in developing the appropriate information security governance and compliance measures.
    • Experience in managing and developing baseline information security configurations and experience with common industry information security standards and guidelines (such as CIS Controls)
    • Experience of identifying risks and developing and implementing policies, procedures and processes.
    • Experience of process development and process improvement.
    • Knowledge and experience with various Information Security governance and control frameworks (NIST, ISO27001/2, PCI-DSS, CIS Controls).
    • Knowledge of security architecture, network security, access control and user access management, encryption, application security, platform security and database security.





 

NB! This job is now closed. You can apply for other jobs by uploading your CV.



 

 

 

Similar jobs you might be interested in:

Information Security and Governance Senior Manager
Location: Johannesburg
Salary: Negotiable
Information security and governance Senior Manager
72 days ago


Senior Data Engineering Specialist
Location: Johannesburg
Salary:
Our client in the telecommunications sector is seeking a professional Senior Data Engineering specialist on a contract duration of 6 months.
Today


Senior Internal Audit Manager
Location: Johannesburg
Salary: 1300000 Annually
Are you ready to move beyond routine audits and have a seat at the strategy table as a Senior Internal Audit Manager?
4 days ago


Java Software Developer
Location: Johannesburg
Salary:
6 days ago


Head of Software Engineering - Hybrid
Location: Sandton
Salary:
7 days ago


Chief Financial Officer
Location: Centurion
Salary: 2 100 000 Annually
Are you a visionary financial leader ready to play a pivotal role in shaping the future of one of South Africa’s most respected names in the security sector? We are seeking a strategic and commercially astute Chief Financial Officer (CFO) to join our executive leadership team and drive financial excellence, innovation, and sustainable growth.
8 days ago


Head of Solutions, Architecture and Implementation
Location: Pretoria
Salary:
10 days ago


Solutions Architect - Pretoria
Location: Pretoria
Salary:
12 days ago


Security Engineer
Location: Pretoria
Salary: 450 Annually
Be the reason our systems stay safe, compliant, and unbreakable.
13 days ago


Commercial Systems Manager
Location: Centurion
Salary:
We are looking for a Manager: Commercial Systems & Enablement to lead and optimize the organization’s commercial systems ecosystem, covering CRM, sales, ordering, and customer self-service platforms. This role is ideal for a seasoned professional with both technical expertise and leadership experience, who can drive system adoption, integration, and continuous improvement to enhance cust...
13 days ago


Create a free job alert for Security Governance and Compliance Specialist in Johannesburg

Enter your email address below and we will email you similar jobs when they become available:

You can cancel at any time. We will not spam you.
By giving us your email address your agree to our Terms and Conditions