AVP - Cybersecurity

Role Overview

AVP - Cybersecurity at SALIC, reporting to the Chief GRC Officer, in the Cybersecurity Division and Department. Job Grade 7, GRC Sector.

Role Purpose

Develop, execute and maintain Information Security and Cybersecurity strategy and establish cybersecurity frameworks, in alignment with the overall strategic objectives and direction of SALIC.

Key Responsibilities

Strategy & Governance

• Develop and implement cybersecurity policies, processes, and procedures to ensure the security of SALIC's critical information systems, resistance to breach attempts, and continuous improvement to meet present and emerging threats to cybersecurity.
• Manage the cybersecurity governance framework, including key structures and procedures, to ensure SALIC's compliance with relevant information security standards and regulations.
• Develop the Department's or Section's objectives, KPIs, annual operational plans and ensure plan execution is meeting the targets.
• Provide input to the sector's strategy from the Department's or Section's perspective in line with SALIC overall vision and mission.

Compliance & Risk Management

• Oversee compliance with regulations, standards and codes of good practice relating to cybersecurity, information assurance and data protection.
• Assess, monitor and manage relevant cybersecurity risks and detect, analyze, investigate and respond to cybersecurity incidents to ensure the protection of valuable and classified information.
• Monitor adherence and compliance to the information security policies and procedures and monitor cybersecurity to safeguard SALIC against potential risks and ensure information assets and technologies are safeguarded.

Security Operations & Protection

• Manage the protection of SALIC's information and information systems in terms of confidentiality, integrity and availability through security planning and governing risk assessment process.
• Plan, implement, manage, monitor, and upgrade security measures for the protection of the organization's data, systems, and networks.

Advisory & Guidance

• Provide advice and guidance on cybersecurity matters and provide an independent perspective on risk levels, mitigation activities and emerging risks in cybersecurity.

Departmental Management

• Ensure effective staffing, professional development, and deployment of staff of the Department or Section in consultation with the Sector Executive or SVP.
• Develop the Department's or Section's resources with the objective to constantly improve information and cyber security posture of the organization.
• Contribute to the preparation of the Department's or Section's annual budget and monitor the financial performance of the Department or Section.
• Implement and execute the Department's or Section's policies and procedures. Oversee the overall performance of the section and ensure KPIs are well developed, cascaded, communicated, and monitored.

Qualifications & Experience

• Bachelor's Degree in Information Technology, Network, Programming, Computer Science or relevant field (Master's Degree Preferred).
• Minimum of 7 to 11 years of experience.