Cybersecurity Manager : Business Information Security

Cybersecurity Manager : Business Information SecurityWoolworths City of Cape Town, Western Cape, South Africa

At Woolies, we are on a mission to maintain and develop a high-performing cybersecurity function in support of a complex business undergoing digital transformation. We are looking for a senior leader in the cybersecurity team to take responsibility for scaling information and cyber security across the Woolworths South Africa business. The focus is on business-related security capabilities including access management, security training and culture, third party and ecosystem security, and data security and protection.

This role reports to the CISO and is a leadership role requiring experience in security risk management, analysis, and advisory.

Key Outcomes People Enhancing cyber intellectual capital : Leadership and management of the business information security team covering talent development and performance management.Building culture and teaming : Management of internal partnerships for execution, including context setting, skills transfer, and up-skilling.Management of key external security partner and service relationships.Fostering business and IT relationships to define requirements in the context of business risk.Process Work closely with Cyber Delivery Management, Architecture, and Engineering capabilities to provide proactive advisory services to IT and business stakeholders.Take responsibility for core capabilities of access management, data security, third party security, and awareness training, bridging the gap between business and cyber technical functions.Work with the SOC to manage threat and vulnerability management.Work with other cybersecurity team leaders, the CISO, and other key stakeholders to define and drive a threat-informed and risk-based cyber security strategy.Contribute to the ongoing improvement of cyber security processes and ways of working.Translate strategic security operational requirements into practical solutions and drive implementation.Contribute to the ongoing maintenance and enhancement of Cyber and Information Security Policies, Standards, Procedures, and Guidelines.Remain aware of global security industry trends and influence the strategy accordingly.Manage forecasts and budgets.Customer Understand Cyber, IT, and Business strategies and contribute to the creation and delivery of the annual cyber security roadmap and execution with a specific focus on business information security and advisory.Plan and prioritize projects and workload to deliver to the roadmap.Provide updates, context, and feedback to relevant stakeholders.Build close relationships with business and IT stakeholders to scale security and to drive the required level of controls over core assets.Technical Acumen Makes sound technical decisions based on understanding of what is commercially achievable within technological constraints.Evaluates the applicability of solutions with the ability to challenge and qualify its suitability for the business.Leverages research on technology-related concepts, trends, and best practices to provide guidance on IT roadmap.Set technical policies and procedures to support IT stability and success aligned to evolving technologies and methodologies.Business & Commercial Acumen Responsive to external influences (positive or negative) on the organisation.Understands what is commercially achievable and makes sound business decisions.Supports the development of business acumen of team through knowledge sharing and upskilling.Maintains advanced knowledge of business operations and organisational metrics and trends.Analytical Thinking Effectively applies substantial in-depth analysis in order to determine and meet requirements.Quickly identifies key issues, stakeholders, and viewpoints in a complex situation or problem.Finds ways to condense large amounts of information into a useful form.Anticipates the consequences of situations and proactively works to overcome potential obstacles.Asks perceptive, probing questions to get to the heart of the matter.Results Orientation Plans and ensures implementation of activities / projects identified in business strategy.Maintains a keen awareness of the interrelationships among various components of large-scale activities / projects.Allocates time and resources as required when faced with multiple demands and competing priorities.Considers the financial implications before finalising activity / project plans.Actively monitors resource allocation and utilisation and makes adjustments as necessary.Seeks and influences new relationships outside own unit and identifies new collaborative partnerships that better position programmes and services.Shares information with colleagues and partners about industry trends and business opportunities.Coaches others on how to develop proposals and work plans for effective partnership arrangements.Establishes connections that help facilitate the accomplishment of broader organisational objectivesmunication Actively listens, interprets, and presents messages in different ways to enhance understanding.Appropriately adapts the message, style, and tone of communication to accommodate a variety of audiences.Reviews presentations to ensure effective use of tools and techniques and provides recommendations.Prepares a wide variety of complex reports and documents using diverse sources.Confidently addresses groups of people, adapting style as appropriate for different audiences.Anticipates change by keeping up to date on current research and trends affecting one's own field.Reviews, evaluates, and disseminates information regarding key methodologies, best practices, and tools to support a future landscape.Continually searches for ways to adapt and improve through change.Consciously models appropriate adaptations and encourages it in others.Devises action plans for adapting to change.Systematically analyses and shares the learning / knowledge gained from change.Redirects own or own team's efforts in response to changed circumstances to ensure effective problem solving.Job Requirements 8+ years relevant experience in the cyber and information security discipline.Demonstrable experience in leading a specialised cybersecurity team within a large environment.Experience with security operations tools, frameworks, practices, and processes.Industry certifications (e.g. CISA, CISM, CISSP).Resiliency, determination, and pragmatism.May be required to assist outside of working hours.Additional Criteria Comfortable giving presentations and training.People leadership experience is advantageous.Good report and technical writing skills.Working knowledge of PCI-DSS.Practical experience with the industry frameworks (e.g. CIS and COBIT).Hands-on technical security experience is highly advantageous."As a proud South African brand, Woolworths is committed to transformation. Meeting our employment equity goals will be taken into account in our recruitment decisions". If you are interested in the above position, please send your CV to

• stating clearly the position you are applying for.

Seniority levelMid-Senior level

Employment typeFull-time

Job functionInformation Technology and Business Development

IndustriesRetail

J Ljbffr