The successful candidate will be responsible for the following key performance areas:

• Manage day-to-day centralised security incident information management and reporting to ensure situational awareness across the SARB Group in support of the security strategic value proposition of a secure operating environment. 
• Develop and manage the Incident Information Management Framework.
• Continually assess the strategy for responding to ongoing incidents, coordinate the execution of such a strategy with operational areas, and initiate the incident management process.
• Oversee and manage governance processes for security incident information management. 
• Provide recommendations to improve response and management processes for the security monitoring teams and applicable operational areas.
• Refine and continuously improve security incident management processes, including liaising with the security incident monitoring and management teams to improve incident response and management capabilities across the SARB Group. 
• Manage coordination between the incident response team and the investigative and support functions within the SARB Group to ensure effective response and management capabilities across the SARB Group. 
• Ensure security incident information management processes are based on industry practices and that guidelines are maintained and incorporated in the various functional areas within the team.
• Compile and provide integrated management information reports to support decision-making.
• Lead and participate in engagements with relevant stakeholders, both within the SARB Group and with external parties, demonstrating a service orientation as well as the ability to solicit and convey information effectively. 
• Take responsibility for ensuring industry practices and changes are maintained and incorporated in own functional area.

To be considered for this position, candidates must have:

• an Honours degree (NQF 8) in Security Management or Information Technology or an equivalent qualification in a related field;
• eight to 10 years’ experience in a security incident handling and response environment, of which at least three years should be in a managerial or leadership capacity; and 
• sound knowledge and experience in areas such as situational awareness, business continuity, information management and stakeholder engagement.

The following will be an added advantage:

• a security certification, such as CISP or SANS SEC504: Hacker Tools, Techniques, Exploits and Incident Handling.