Senior Information Security Manager

It's fun to work in a company where people truly BELIEVE in what they're doing!

This role will define and deliver the overall Cyber and Information Security strategy in line with business objectives for the Pick n Pay Group

Minimum requirements

Relevant tertiary Information Systems qualification or equivalent essential
Certified Information Security Manager (CISM) advantageous
Certified Information Systems Security Professional (CISSP) advantageous

Minimum 5 years experience in the Information Security realm, ideally in a leadership, strategic and/or architectural role
10+ years Technical experience within infrastructure Services, physical and AWS, Azure, and Office 365 (ideally AWS and/or Microsoft Security related certifications)
Certified Information Systems Security Professional (CISSP) or equivalent, advantageous
Cloud Security experience, ideally Certified Cloud Security Professional (CCSP) or equivalent advantageous

Competencies

Excellent communication skills (verbal and written)
Ability to translate complex technical concepts and jargon into language business stakeholders can easily understand
Passionate about our people and keeping them safe from cyber-threats whilst enabling the highest levels of productivity possible
Ability to be comfortable in the grey areas. A lot of Information Security happens in the grey and compromise is always required
Passionate about the subject and constantly stay abreast with current developments in the Cyber-Security space

Own and manage Information Security Operations
Own and drive Security related projects and initiatives
Define policy and architecture on all things related to cyber-security in line with business objectives and within budget constraints
Communicate the information security strategy, threats and technology plans to company executive members and other relevant stakeholders
Responsible for incident response plans and drills and facilitate the actual incident response when required as well as handle incident communication to senior management and other relevant stakeholders
Works closely with business areas to evaluate risk vs cost of business opportunities as well as the ability to clearly articulate the rationale for risk acceptance proposals vs budget asks in order to mitigate potential threats aligned with the business risk appetite
Have a good technical understanding of the cyber-security landscape as well as the ability to evaluate current threats and move quickly, decisively and with technical proficiency, to mitigate potential threats in line with the business risk appetite
Define the structure and management of the Security team and budget
Collaborate with the business Risk and Privacy team on Information Security related activities including audits, policy definition, compliance reporting etc.
Have a deep understanding of PCI-DSS, P2PE, POPIA and other compliance standards and legal obligations the company is subject to as well as defining the strategy and high-level requirements to ensure compliance
Have a deep understanding of Cloud technologies and how the use of these technologies impacts on cyber-security and the ability to define forward-thinking, modern standards and polices appropriate to a cloud-first organisation
Well versed in AWS and Azure Cloud-specific security technology as well as cryptography and other security mechanisms to accomplish business objectives in cloud environments securely
Works closely with other areas of the business and I&T organisation to ensure standards and requirements (PCI-DSS and POPIA) are met and maintained
Supply documentation detailing Information Security strategy and current posture to board level and Audit and Risk committees as required

Drive Cyber-Awareness programs for staff and the larger Pick n Pay community

Closing date: 5 September 2024

If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us!

Discover who we are