DIRECTOR: INFORMATION SECURITY, GOVERNANCE & RISK Job Vacancy

The South African National Biodiversity Institute (SANBI) is looking for a highly motivated individual to keep the impact and occurrence of information security incidents within the Institute’s risk appetite and impact tolerance levels. The successful candidate will be expected to protect the Institute’s information to maintain the level of information security risk acceptable in accordance with the security and cybersecurity policy. Furthermore, he/she must establish and maintain information security and cybersecurity roles and access privileges and perform security monitoring. This position requires a postgraduate degree in Computer Science, or equivalent and relevant qualification at NQF level 8. A postgraduate qualification in Computer Science, or equivalent and relevant qualification at NQF level 9 will be an added advantage. This position also requires a minimum of 10 years’ experience in the relevant field, 5 years of which should be at middle management level. The following competencies are required for the candidate to be successful in this position: proven ability to lead monitoring and assessment activities; advance knowledge and experience in CISSP, CSX, CISM, CGEIT, COBIT, CSSP, ISO 38 500, ISO 27 000, and ISO 31 000; extensive experience in developing and implementation of strategy related to information security, governance and risk management; proven ability to work with government and non-governmental organisations; management of budgets and critical projects would be highly advantageous; stakeholder management; in-depth understanding of relevant legislation, policies, procedures, processes, practices related to information security, governance and risk management; advance knowledge and experience for planning, organising, and report writing skills; exceptional organisational, analytical, interpersonal, and problem solving skills; outstanding communication skills (both verbal and written); excellent computer literacy and experience in the application of software tools including (Ms Word, PowerPoint, Excel, Internet and Outlook). The candidate must be in possession of a valid driver’s licence and must be willing to travel nationally. Key Performance Responsibilities include: Establish and maintain an Information Security Management System (ISMS); Define and manage information security risk treatment plan; Protect against malware and monitor and review the ISMS; Manage network, connectivity security, and monitor the infrastructure for security related events; Manage endpoint security and manage user identity and logical access; and Develop, implement, and maintain, ICT Governance Processes, Procedures, Framework, and manage physical access to IT assets and manage sensitive documents and output devices.