DEPUTY DIRECTOR: DEPARTMENTAL INFORMATION SECURITY OFFICER

Job Overview

The Office of the Chief Justice is hiring a Deputy Director: Departmental Information Security Officer based at the National Office in Midrand. The role requires a National Diploma in IT or Information Security at NQF Level 6, alongside four years of experience in IT Systems Security and ICT Governance, including three years at management level. Responsibilities include managing information security programmes, risk assessments, disaster recovery plans, endpoint security, and leading the sub-directorate. Relevant certifications such as CISSP, CISM, or ISO 27001 experience are advantageous.

Requirements & Qualifications

• National Diploma in Information Technology related or equivalent qualification in Information Security at NQF Level six (6) with 360 Credits as recognised by SAQA
• Minimum of four (4) years’ experience in IT Systems Security and ICT Governance
• Minimum of three (3) years’ experience at Assistant Director / Junior Management level
• CISSP, CISM, CASP, or SABSA Certificates or Equivalent Certification (added advantage)
• Valid driver’s license (added advantage)
• Knowledge of IT Security Policy Development and administration
• Working knowledge and experience with ISO 27001 and other related information security standards and frameworks
• Understanding of ICT threats, vulnerabilities in all ICT domains and applicable remediations and technologies
• Skills in ICT Risk management, Disaster Recovery and ICT Continuity, ICT Audits and Compliance, and Public Service Regulations

Key Duties & Responsibilities

• Define, operate and monitor a system for information security management including the development and implementation of the information security programme
• Assess current information security status, identify and analyse gaps, and liaise with business units regarding ICT Risks and Security matters
• Develop and coordinate the information security risks treatment plan and conduct information security risk assessments
• Monitor and review the information security management program, conduct vulnerability assessments, and review management compliance
• Coordinate and oversee implementation of end-point security and develop end-user management and access control procedures
• Coordinate and manage user identity, logical access and physical access to IT assets
• Develop and implement Disaster Recovery and ICT Continuity Plans
• Manage the Sub Directorate including performance management, discipline, administrative functions, operational planning, procurement, and asset management

Enquiries & Contact