Johannesburg: Senior IS Manager – Information Security

Introduction Harmony Gold Mine is seeking a strategic and highly capable Senior IS Manager – Information Security, Governance, Risk and Compliance to build, deploy, and maintain Information Security (IS) systems and infrastructure. Operating primarily within a surface environment with options for remote work as agreed upon by a supervisor, the successful candidate will secure technology assets, identify cyber threats, and embed robust IT governance throughout the organization. This high-level corporate role features stressful conditions and strict time constraints with high-consequence outcomes, necessitating a technically strong, assertive leader who will oversee disaster recovery and ensure full compliance with the Mine Health and Safety Act. Minimum Requirements To be considered for this role, applicants must meet the following criteria: Education: Degree in Information Technology, Computer Science, or an equivalent qualification. A Post Graduate Degree in a related field is preferred. General Experience: A minimum of 1012 years of experience in the Information and Communication Technology sector, with direct technical experience designing/implementing Information Security frameworks and embedding enterprise governance, risk, and compliance solutions. Management Experience: 3 to 5 years of management experience within a large organization. Specialized Exposure: 5 years of experience in the implementation of IT controls (including SOX) alongside targeted cyber security experience. Industry & Planning Depth: Deep experience in Disaster Recovery and Business Continuity planning, paired with an advanced understanding of ICT applications within the mining industry and IT governance frameworks. Preferred Certifications: CISA, CRISC, CISSP, or equivalent certifications, along with deep knowledge of Data Governance laws. Key Characteristics: A highly cognitive, self-motivated, and independent professional exhibiting absolute integrity, composure, persistence, and excellent problem-solving and people management skills. Job Description Summary The Senior IS Manager – Information Security, Governance, Risk and Compliance will lead a cross-disciplinary team to define information security frameworks and mitigate enterprise-wide technology risks. Key accountabilities include: Strategic Security Leadership: Contribute to the Corporate IS strategy and set, own, and deliver the Information Security strategy, IT governance charter, and IT Risk Management plans to protect the integrity, confidentiality, and availability of company data. Information Security & Threat Mitigation: Deploy and evaluate security infrastructure (firewalls, intrusion detection, anti-virus systems); monitor logs for anomalies; investigate security violations; and lead root-cause analyses and vulnerability management to remediate threats. Governance, Risk & Privacy Compliance: Adopt a formal IT governance framework aligned with business objectives; maintain an IT risk register; and partner with the Group Information Privacy Officer to oversee POPIA compliance and secure personal data. Business Continuity & Disaster Recovery: Identify, develop, and maintain the IT Disaster Recovery strategy; ensure business continuity recovery plans are routinely tested; and provide ongoing resilience assurance to the Board and Senior Leadership. Stakeholder Engagement & Vendor Oversight: Coordinate governance reporting to the IT Steering Committee and the Boards Audit and Risk Committee; partner with internal/external assurance providers; and manage outsourced security operations centre (SOC) vendors against strict SLAs. Team Leadership & Financial Management: Provide leadership, mentorship, and clear performance indicators for a productive team, while contributing to the compilation and monthly performance tracking of the sub-division’s operating budget.