Job Description:
Head Information Security
Introduction

My client in the Banking industry is looking for a Head Information Security who will be responsible for establishing, maintaining the companies information risk management program and leading the information security team
Description
Responsibilities:

Develop and articulate a shared vision for a “best in class”, Information security program to ensure information assets are adequately protected and Partnering with the companies IT
Responsibilities include identifying, evaluating, protecting against and reporting on information security risks in a manner that meets compliance and regulatory requirements, and aligns with and supports the risk posture of the company
This position serves as the process owner of all ongoing activities related to the availability, integrity and confidentiality of customers, business partners, employees and business information in compliance with companies information security policies
Chair the companies technology Risk Committee, that brings together key security and risk stakeholders to develop and review companies enterprise security and risk strategies
Develop, publish and maintain comprehensive information security standards, policies, procedures and guidelines
Develop, implement and monitor a strategic, comprehensive enterprise information security and risk management program to ensure the integrity, confidentiality and availability of information owned, controlled or processed by the company
Ensure the effective and efficient management and control of functions/resources in accordance with the stipulations of the Public Financial Management Act, fraud prevention and risk management principles, legislation, company policies, processes and regulations
Manage performance of direct repartees ensuring agreement of annual goals, measuring performance against agreed goals and dealing with non-performance accordingly
Requirements:

Bachelor’s degree in Computer Science, Information Systems, Computer Engineering, Systems Analysis
Information Security Certifications such as Certified Information Systems Security Professional Certification (CISSP)
Certified Information Security Manager (CISM) is advantageous
7 years’ experience leading the information security system office and applying information security, risk management and privacy practices
7 years practical experience designing and implementing enterprise information technology security
7 years of practical experience working with information privacy and security laws (such as PCI-DSS, and data breach reporting laws)
Working with the Security Regulation
Knowledge of national and international regulatory compliance and frameworks such as SOX, BASEL (xx), and PCI DSS