Executive Head: GT Functional Area - Nedbank

Job Purpose

We are seeking a highly skilled and experienced Executive to lead our Information Security department. The successful candidate will be responsible for overseeing the virtual security operations centre, threat detection and investigation, incident response, security incident and event management (SIEM), network security, cloud security, data loss prevention, threat and vulnerability management, cryptography, application security design, privileged access management, endpoint detection and response, antivirus, and active directory.

Additionally, the role involves managing stakeholders to ensure cybersecurity becomes a discipline across the Bank and managing and growing the team’s skills.

Job Responsibilities

• Lead and manage the Information Security team, ensuring effective performance and development. 
• Oversee the virtual security operations centre and ensure continuous monitoring and protection of the Bank’s digital assets.
• Develop and implement strategies for threat detection, investigation, and incident response.
• Manage security incident and event management (SIEM) systems to ensure timely detection and response to security incidents.
• Ensure robust network security, including email and web security, firewalls, and other protective measures.
• Oversee cloud security initiatives to protect data and applications hosted in cloud environments.
• Implement data loss prevention strategies to safeguard sensitive information.
• Conduct threat and vulnerability assessments and manage remediation efforts.
• Oversee cryptographic solutions to protect data integrity and confidentiality.
• Ensure secure application design and development practices.
• Manage privileged access to critical systems and data.
• Oversee endpoint detection and response, antivirus solutions, and active directory security.
• Engage with stakeholders across the Bank to promote and integrate cybersecurity practices.
• Stay current with emerging security trends, threats, and technologies, including artificial intelligence, automation, and DevSecOps.

Qualifications and Experience

• Bachelor’s degree in Information Security, Computer Science, or related field. A Master’s degree is preferred.
• Professional certifications such as CISSP, CISM, or CISA.
• Minimum of 10 years of experience in information security, with at least 5 years in a leadership role.
• Strong knowledge of security operations, threat detection, and incident response.
• Excellent leadership and communication skills.
• Proven ability to manage stakeholders and drive cybersecurity initiatives.
• Proven experience in managing and developing a high-performing team.
• Familiarity with emerging technologies such as artificial intelligence, automation, and DevSecOps.

Technical / Professional Knowledge

• Principles of project management
• Relevant regulatory knowledge
• Resource allocation principles
• Strategic HR planning principles
• Business writing skills
• System Development Life cycle(SDLC)
• Service orientated Architecture (SOA)
• Employee benefits offerings
• Client Service Management
• Organisational design and workforce planning techniques

Behavioural Competencies

• Energizing the Organization
• Establishing Strategic Direction
• Operational Decision Making
• Business Savvy
• Cultivating Networks and Partnerships
• Financial Acumen
• Strategic Influence
• Leading Change