Position Overview

We are seeking a highly skilled Cyber Security, Risk & Governance Manager to oversee and manage cyber security operations, IT risk, and governance within our organization. This role will be responsible for monitoring the IT environment, managing security incidents, ensuring compliance with industry best practices, and driving the governance of IT security policies. The ideal candidate will bring strong expertise in IT security and risk management, ensuring that our cyber security posture remains robust and aligned with business objectives.

Key Responsibilities

• Oversee and monitor the entire cyber security operations environment, ensuring alignment with the security strategy, best practices, and roadmaps.
• Manage and report on all cyber-related incidents, coordinating resolutions with relevant stakeholders.
• Lead the vulnerability management process, ensuring that critical, high, and medium findings are remediated in a timely manner.
• Track and report on the security operations dashboard, providing clear insights into the current security posture.
• Contribute to security awareness programs, using dashboard trends and topical issues to inform strategies.
• Ensure the integration of logical and physical security measures, addressing potential security gaps.
• Oversee access management, particularly on SailPoint and CyberArk platforms, while managing the Joiner/Mover/Leaver process.
• Define and document roles and responsibilities for security operations across all stakeholders.
• Manage third-party vendors involved in security operations and business continuity planning, ensuring timely and quality delivery.
• Facilitate the transition of security, risk, and governance (SRG) programs into Business as Usual (BAU) operations.
• Define and manage SLAs (Service Level Agreements) and OLAs (Operational Level Agreements) to ensure consistent performance.
• Support the integration between IT and OT environments, ensuring security as these landscapes converge.
• Stay up-to-date with local and international security developments, applying relevant insights to the organization’s security strategy.
• Manage the IT audit process, ensuring findings are resolved in a timely manner.
• Represent the organization at key security and business continuity conferences to uphold the company’s brand and reputation.

Qualifications and Skills

• Strong management expertise in IT security and experience in manufacturing environments.
• Excellent report writing and negotiation skills, with the ability to translate technical solutions for senior management.
• Proven ability to develop commercially viable technical designs and implement security strategies.
• Strong interpersonal and communication skills, with the ability to work effectively in a team.
• Strategic thinker with strong analytical and problem-solving abilities.
• Proven ability to plan, prioritize, and track workloads effectively.

Experience and Certifications

• 8+ years of experience managing operational security environments.
• BCom / BSc or equivalent degree is mandatory.
• Experience in OT security is an advantage.
• ITIL certification or experience is an advantage.
• Relevant certifications such as CISSP, CISM, ISO 27000, or CIPP are preferred.
• Knowledge of the Cobit framework is mandatory.