Business Information Security Officer

What will you do?

Establish and manage a BU Information Security Programme,
Participation in Group Information Security Programme (GISP) initiatives,
Information Security Incident response and Cyber Crisis Management,
Information Security Governance and assurance,
Application (including cloud) and Infrastructure Security, and
Cybersecurity Education, Training and Awareness
The BISO will implement processes and controls as agreed with the CISO and the Business CIO.
The BISO will be responsible for quality and cost effectiveness of delivery of information security services in the BU and willreport on these metrics to the GISP

Be accountable for IT’s Risk and Compliance (it SRM and Sanlam Group standards)

What will make you successful in this role?

• Knowledge of ISO27k, Cobit, ITIL, CIS T20 and ISF best practices.
• Knowledge of Information Risk Methodologies (ideally IRAM2), threat modelling and Operational Risk management methodologies
• Knowledge of the key business processes, key stakeholders and have their contact details readily available.
• Understanding of the risk management and governance structures within the Cluster
• Experience in policy writing and reviews.
• Experience in agile/ relevant solution development methodologies.
• Familiarity with security practices and standards in development like the security development life cycle (e.g. OWASP).
• Understanding of the technical and application environment of the Cluster/ BU.
• Experience in analysis and control design, strong written and verbal communication skills.

Qualification and Experience:

Degree or Diploma with 6 to 8 years related experience.

Knowledge and Skills:

Cyber Security Administration
Cyber Security Audits
Cyber Security Compliance
Assessing security risks
Assessment risk mitigation for the organisation

Personal Attributes

Build a successful career with us

We’re all about building strong, lasting relationships with our employees. We know that you have hopes for your future – your career, your personal development and of achieving great things. We pride ourselves in helping  our employees to realise their worth. Through its five business clusters – Sanlam Fintech, Sanlam Life and Savings, Sanlam Investment Group, Sanlam Allianz, Santam, as well as MiWay and the Group Office – the group provides many opportunities for growth and development.

Core Competencies

Turnaround time

The shortlisting process will only start once the application due date has been reached. The time taken to complete this process will depend on how far you progress and the availability of managers.