IT Security and Risk Manager - Sandton Verfied Gold Badge

R 50K to 70K per month Sandton, Gauteng Sandton, Gauteng more than 14 days ago 06-12-2015 2:43:43 PM
03-01-2016 2:43:43 PM
Overview:-

The position of IT Security and Risk Manager is focused on enabling the business to grow through the mitigation of information security and technology risks and fulfilment of related regulatory obligations. This role has a direct responsibility for providing leadership in:
• Supporting the IT Governance team in defining, implementing and monitoring the IT governance framework and IT operating model.
• Ensuring all business processes have sufficiently effective information security.
• Reporting on the results from evaluating the risk management system.
• Facilitating the on-going development of a best practice IT risk management framework

Key Performance Areas:
• Maintain and execute the IT risk management framework and IT risk register.
• Support and consult all global and local IT functions in IT risk management tasks.
• IT Compliance Management
• Perform and plan self-assessments and reviews to assess the risk profile of our client.
• Develop, implement and maintain a best practice IT process management framework.
• Maintain the definition of ownership of processes, standards and guidelines.
• Drive, train and maintain the training and awareness for processes and standards
• On-going development of the IT audit management mechanism and framework
• Facilitation of audit pathway.
• Support the IT Governance team.
• Provide guidance and work closely together with other departments.
• Drafting IT security policies and relevant documentation
• Ensuring that security investments and IT capabilities are future proof
• Conducting information security risk assessments prior and post deployments.
• Managing the increased risks due to outsourcing, including the protection of confidential and personal information in the possession of service providers

Minimum Requirements:-
• 3 year degree in relevant subject areas required
• Security certifications, such as CISM/CRISC and CISSP
• Training in relevant security standards & good practices, such as ISO 27001, ISO 27002 and COBIT 5.
• 5 years information security and IT risk management experience required, including: IT risk management, IT Process Management, IT Audit management, Support IT Governance, as well as information and cyber security.

Benefits:-
This is a permanent position in a long and well-established, international company whose South African Head Office is in Sandton, Johannesburg – paying between R50K to R70K/mth depending on experience.

Pls apply urgently on the link provided (about 5 minutes of your time).