Deputy Director: Departmental Information Security Officer REF NO: 2026/138/OCJ

REQUIREMENTS :

• Applicants should be in possession of a National Diploma in Information Technology related or equivalent qualification in Information Security at NQF Level six (6) with 360 Credits) as recognised by SAQA.
• A minimum of four (4) years’ experience in IT Systems Security and ICT Governance of which three (3) years’ should be at Assistant Director / Junior Management level. CISSP or CISM or CASP or SABSA Certificates or Equivalent Certification and driver’s license will serve as an added advantage.
• Knowledge and skills: Knowledge of IT Security Policy Development and administration, working knowledge and experience with ISO 27001, other related information security standards and frameworks, understanding of ICT threats, vulnerabilities in all ICT domains and Applicable remediations and technologies,
• Skilled in ICT Risk management, Disaster Recovery and ICT Continuity, ICT Audits and Compliance, Public Service Regulations and ICT Governance. Skilled in communication (written and verbal), computer literacy (MS Office), Project Management, planning and organising, report writing, negotiation, interpersonal skills, decision making and Interviewing skills. 

DUTIES :

• Define, operate and monitor a system for information security management including the development and implementation of the information security programme: Assess the current information security status, identify and analyse gaps, liaise with business units regarding ICT Risks and Security matters, oversee information security projects and conduct research on technology and risks. Develop and coordinate the information security risks treatment plan: Conduct information security risk assessment, coordinate management information risk activities and liaise with business units.
• Monitor and review the information security management program: Conduct self-assessment, analyse and conduct vulnerability assessments, review management compliance, coordinate and report on implementation of corrective measures.
• Coordinate and oversee implementation of end-point security: Develop end-user management and access control procedures, manage and coordinate the implementation of technology, review and improve endpoint-security deployment; Coordinate and manage user identity, logical access and physical access to IT assets: Develop and monitor implementation of user access control procedures, liaise with relevant stakeholders, coordinate the implementation of policy and procedures and monitor compliance, Development and Implementation of Disaster Recovery and ICT Continuity Plans.
• Manage the Sub Directorate: Manage performance and development system within the sub-directorate, Maintenance of discipline, Undertake administrative functions within the unit, Establish, implement and maintain efficient and effective communication arrangements, Develop and manage the operational plan and report on progress as required, Compile and present all required administrative reports, serve on transverse task teams as required, procurement and asset management for the sub directorate, plan and allocate work.