DEPUTY DIRECTOR: CHIEF INFORMATION SECURITY OFFICER

Job Overview

The Department of Basic Education is hiring a Deputy Director: Chief Information Security Officer (Level 12) based in Pretoria. The role requires an NQF level 6 qualification in IT or Information Systems, at least 4 years as an Assistant Director, 5 years as a CISO/ISO, and relevant certifications such as ITIL, CISM, or CISSP. Responsibilities include designing security controls, protecting infrastructure against threats, managing vulnerability programs, ensuring data protection, and overseeing incident response.

Requirements & Qualifications

• NQF level 6 post matric qualification in Information Technology/Information Systems or equivalent qualification as recognised by SAQA
• Four (4) years relevant experience as an Assistant Director or equivalent
• A minimum of two (2) certifications in any of the following: ITIL, COBIT, CISA, CISM, CISSP, CRISC, ISO 27001
• A minimum of at least five (5) years’ experience as a Chief Information Security Officer/ Information Security Officer
• Experience in managing networks
• Sound knowledge of Enterprise or Technology architecture environment, strategic management, and ICT systems and processes
• Sound knowledge of Microsoft environment, virtualised, and cloud environments
• Sound knowledge of business continuity management
• Sound knowledge of the E-government strategy and roadmap
• Understanding organisational information flows and maintaining an inventory of data
• Understanding the data classification framework and implementing controls in accordance with sensitivity levels
• Vulnerability awareness through an understanding of the vulnerability Detection and management program
• Patching and Remediation SLAs and Agreed-upon timelines for addressing security vulnerabilities
• A valid driver's license

Key Duties & Responsibilities

• Designing, configuring, deploying, and maintaining security controls to safeguard the Department’s infrastructure
• Actively protecting the Department’s IT assets and infrastructure from external or internal threats and ensuring compliance with statutory and regulatory requirements
• Analysing problems and recommending solutions, products and technologies to meet the Organisation’s security objectives
• Performing security assessments for all systems and applications and checking for compliance with cybersecurity standards
• Developing and interpreting the cybersecurity strategy, framework, and maturity levels
• Leading the implementation of best practice network security controls across cloud and on-premises platforms
• Focusing on the safe adoption of AI integration
• Ensuring sensitive information is identified and adequately protected through data protection and encryption
• Supporting the development of disaster response and recovery strategies and business continuity plans
• Leading threat landscape assessments, vulnerability assessments, and penetration tests
• Providing third-line support for information security-related queries and advanced incident response support for breaches
• Performing Third-Party Risk Management and monitoring supplier security postures
• Delivering on Security Projects within budget and training employees on Information Security

Enquiries & Contact