SUMMARY:
Certified Information Security Officer (CISO) Resource

POSITION INFO:

Certified Information Security Officer (CISO) Resource

Location: Gauteng, JohannesburG

Job Type: Contract, Full-Time

Job Description

We are seeking for the Certified Information Security Officer (CISO) Resource that will provide strategic cybersecurity leadership, governance, risk management, and advisory support to ensure that the organisation’s information assets, systems, and operations are protected against cyber threats.

Job Duties

• Develop, review, and advise on cybersecurity strategy, governance frameworks, policies, standards, and procedures.
• Provide leadership on cyber risk management, compliance, security governance, and security maturity improvement initiatives.
• Assess cybersecurity risks and recommend controls to protect information systems, infrastructure, applications, and sensitive data.
• Support Security Operations Centre (SOC) governance, incident management, threat response, and reporting processes.
• Advise stakeholders on regulatory, audit, and compliance requirements relating to cybersecurity and information security.
• Oversee or support incident response planning, cyber resilience, business continuity, and disaster recovery alignment.
• Provide executive-level reporting on cyber risks, control gaps, remediation plans, and security posture.
• Promote cybersecurity awareness and good security practices across technical and business teams.

Education

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a related field.
• Valid CISO / Certified Information Security Officer certification or equivalent recognised cybersecurity leadership certification

Experience

• Proven experience in cybersecurity leadership, information security governance, cyber risk management, or SOC environments.
• Experience developing or implementing cybersecurity policies, controls, frameworks, incident response processes, and security governance structures.
• Strong understanding of cyber threats, security architecture, vulnerability management, incident management, and compliance requirements.
• Ability to engage senior stakeholders, technical teams, auditors, vendors, and client representatives on cybersecurity matters