Cybersecurity Governance and Compliance Manager

The role holder is responsible for managing the company's cybersecurity governance and regulatory compliance operations to ensure organizational resilience and alignment with national and group-level standards. The role holder is accountable for developing cybersecurity frameworks, conducting risk assessments, and enforcing protection measures across functions to minimize cyber threats and regulatory exposure. The role shall be carried out in accordance with the stipulated business policies and procedures.

Key Responsibilities

• Develops the company's cybersecurity policies and supporting standards, ensuring alignment with the company Group governance and security strategies.
• Establishes a robust cybersecurity governance model that integrates regulatory compliance, risk management, and enforcement mechanisms.
• Audits and reviews security architecture and operations to validate compliance with secure-by-design principles and cybersecurity best practices.
• Evaluates SOC processes and escalation procedures to enhance incident detection and streamline response efforts.
• Leads cybersecurity compliance assessments to ensure alignment with national and sectoral regulatory standards.
• Formulates cybersecurity risk mitigation strategies and integrates them into the technology design in coordination with Tech Security.
• Enforces cybersecurity policies and frameworks across all functions and departments to maintain enterprise-wide protection.
• Conducts regular cybersecurity risk assessments to identify threats and deploy appropriate control mechanisms.
• Designs and delivers cybersecurity awareness and training programs for employees in collaboration with Human Resources.
• Engages internal departments and external regulators to promote collaboration and improve organizational threat posture.
• Maintains active relationships with national cybersecurity authorities and certification bodies to ensure ongoing compliance.
• Monitors evolving cyber threats and regulatory changes to adjust internal controls and policies accordingly.
• Implements proactive control measures and strategic improvements based on lessons learned from past security incidents.

Qualifications

• Bachelor in Business Administration, Law, or related field
• Preferred experience of 7 years and above, or equivalent in the area of expertise

Location
SA, SA