Financial Sector Cybersecurity Consultant - BSTD

The primary objective of this role is to enhance cybersecurity resilience through proactive collaboration, effective coordination, timely early warning mechanisms, and comprehensive situational awareness across national, regional (Southern African Development Community) and international central banking communities. This will be achieved by establishing, facilitating and actively engaging in various cybersecurity structures and forums –including internal, inter-organisational, national, regional and international platforms – to foster collective cyber defence and enable swift and appropriate responses to cybersecurity incidents.

Detailed description

The successful candidate will be responsible for the following key performance areas:

• Facilitate national, regional and international financial (central banking) industry collaboration to strengthen cybersecurity resilience by advocating and supporting relevant legislative frameworks, establishing appropriate cybersecurity structures and actively participating in national forums as mandated under the Financial Sector Regulation Act 9 of 2017 and the National Cybersecurity Policy Framework (e.g. the Financial Sector Contingency Forum, Financial Sector Cyber Resilience Subcommittee, cybersecurity incident response teams, Cybersecurity Response Committee and National Consumer Commission).

• Drive, manage and administer the Operational Security Situational Awareness initiative involving collaboration with 50 central banks. Responsibilities include coordinating fortnightly virtual meetings and handling all administrative tasks, such as agenda preparation, minutes and managing presentations and discussions. Additionally, oversee the planning and coordination of an annual in-person conference, including logistical arrangements, agenda development, issuing invitations, managing guest speakers and coordinating presentations.

• Drive regional and international collaboration on cybersecurity and cyber resilience by leading and contributing to existing and new structures (e.g. the Cyber Working Group under the Committee of Central Bank Governors in the Southern African Development Community, BRICS Rapid Information Security Channel, International Monetary Fund Cyber Resilience Centre, and cyber working groups under the Bank for International Settlements).

• Coordinate and align cybersecurity-related initiatives across key areas within the South African Reserve Bank (SARB) – including the Prudential Authority, Financial Stability Department, Business Solutions and Technology Department and National Payment System Department – to ensure cohesive participation and support for sectoral, national, regional and international cybersecurity efforts.

• Position the SARB Group as a leader in financial sector collaboration and information-sharing to promote cyber resilience.

• Develop, maintain and update the SARB Group Cyber Resilience Framework in line with collaboration efforts.

• Develop, oversee the implementation of and ensure compliance with the SARB Group's Cybersecurity Responsible Disclosure Policy.

• Ensure the SARB Group drives and capacitates national and regional sector cybersecurity incident response teams and supports international response efforts.

• Ensure appropriate state agency (State Security Agency, South African Police Service and National Cybersecurity Hub) involvement when dealing with incidents as part of the National Incident Management Centre structure.

Job requirements

To be considered for this position, candidates must be in possession of:

• at least an Honours degree (NQF 8) in Cybersecurity, Information Security, Information Technology or an equivalent qualification;

• advanced security certifications that are not product-, security area- or technology-specific (e.g. Certified Information Systems Security Professional, Certified Information Security Manager or Certified Ethical Hacker); and

• at least eight to 10 years’ experience in cybersecurity management, preferably in the financial sector.

Additional requirements include:

• knowledge and skill in:
• cybersecurity governance;
• cybersecurity incident and threat management;
• risk management;
• emergency/contingency management;
• general management;
• business continuity management;
• effective communication skills;
• conceptual thinking skills;
• the ability to plan and give advice;
• the ability to build and maintain relationships;
• impact and influence;
• a drive for results;
• negotiation skills;
• the ability to manage complexity and ambiguity;
• judgement and decision-making skills;
• interpersonal sensitivity;
• knowledge of the relevant legislation; and
• advanced computer literacy skills.

In line with the SARB’s commitment to diversifying its workforce, preference will be given to suitable candidates from designated groups. People with disabilities are welcome to apply.

The SARB offers remuneration and benefits commensurate with the level of the position and in line with the market. The level at which the successful applicant will be appointed will depend on his/her competence and experience.