DIRECTOR(DEPARTMENT INFORMATION SECURITY OFFICER (DISO)) – DEPARTMENT OF WATER AND SANITATION

REQUIREMENTS:

• A Bachelor’s Degree at NQF 7 qualification in ICT or related field.
• Certified Information Systems Security Professional (CISSP) and/or Certified Information Security Manager (CISM).
• Five (5) to ten (10) years’ experience in ICT.
• Minimum of (5) Five years’ experience should be at a specialist/middle management in cyber security. Demonstrated experience in cyber security, risk management and OT (operational technology) security.
  Demonstrated technical and tactical experience in the field of cybersecurity, including information security and
  compliance.
• Knowledge of information and cybersecurity models and frameworks, and risk management.
• Knowledge and understanding of relevant legal and regulatory requirements, such as data privacy, POPIA and MISS. Familiarity with information management practices, IT Governance, system development life cycle management, IT services management, infrastructure and operations, and enterprise architecture.
• Knowledge of business ecosystems, (SaaS) software as a service, (IaaS) infrastructure as a service, (PaaS) platform as a service, SOA, APIs, open data, microservices and predictive analytics.
• Exceptional soft / interpersonal skills, including teamwork, facilitation, and negotiation skills.
• Excellent analytical and technical skills.
• Excellent written, verbal, communication, and presentation skills.
• Excellent planning and organizational skills.
• Excellent stakeholder management skills. Knowledge and understanding of social engineering concepts.
• Knowledge and understanding of operating systems, middleware, and databases.
• Knowledge of project management methodologies and processes.
• Knowledge and understanding of network connectivity.
• Take a holistic system perspective.
• Empathizes with multiple points of views.

DUTIES.

• Lead, develop, implement, and manage the end-to-end information and cybersecurity program of the
  department.
• Manage the ICT risk management function to support the overall departmental risk management function.
  Ensure compliance for cyber security, risk management, data privacy and confidentiality, information security
  management, including the development of policy standards, processes, and procedures as well as regular
  cybersecurity management reporting to stakeholders.
• Oversee the technical security operations function in line with the cybersecurity best practices and communicate to stakeholders through dashboards and reports on cyber and information security in line with cybersecurity frameworks.
• Develop, implement, and manage the ICT business and service continuity plans including data backup and disaster recovery implementation and testing.
  NOTE: Women and persons with disabilities are encouraged to apply and preference will be given to the EE Targets.