Midrand: Information Security Manager posted by Communicate Finance

About the Role

We are seeking an experienced Information Security Manager to lead our enterprise-wide cybersecurity strategy and drive business objectives. The successful candidate will be responsible for developing and enforcing security governance frameworks, policies, and standards, while ensuring consistent security posture across all aspects of our organization.

Key Responsibilities

• Define and drive enterprise-wide cybersecurity strategy
• Develop and enforce security governance frameworks, policies, standards
• Align security initiatives with business objectives, regulatory requirements, NIST CSF, and Joint Security Standards (JSS)
• Partner with CIOs and executive leadership to ensure consistent security posture
• Design secure solutions across hybrid environments (on-prem and Azure)
• Embed security into infrastructure and application projects
• Manage identify and access controls, including Azure AD, MFA, and privileged access management
• Oversee daily security monitoring, incident response, threat intelligence
• Lead BYOD security through MDM, DLP, and secure access controls
• Lead 24/7 SOC operations and incident escalation processes
• Define SOC workflows, roles and response playbook
• Integrate SIEM, SOAR, and threat intelligence platforms
• Track and improve KPIs such as MTTD and MTTR
• Ensure compliance with POPIA, GDPR, NIST CSF, JSS, ISO standards and internal policies
• Manage internal and external audits from start to finish
• Oversee the lifecycle of security technologies including Microsoft 365 E3/E5 and Hailstone platforms
• Track ROI, licensing, training and consulting spend
• Coach, mentor and develop SOC analysts, engineers and specialists

Requirements

• Minimum 8+ years in IT Security with at least 5 years in a leadership role
• Proven cybersecurity leadership in hybrid cloud environments
• Strong understanding of SIEM, SOAR, SOC operations and threat intelligence
• Familiarity with ISO/IEC 27001, ISO.IEC 20000, NIST, and CIS controls
• Stakeholder engagement and communication abilities
• Experience managing BYOD environments and securing distributed branch networks

Qualifications

• Bachelor’s Degree in Computer Science, IT, or related field
• GIAC Security Operations (GSOM) or equivalent SOC certification
• CISSP, CISM or equivalent

Salary & Benefits

Not applicable