Website ABSA Bank Tanzania
ABSA Bank Tanzania
Absa Bank Tanzania
Empowering Africa’s Tomorrow, Together… One Story at a Time
With over 100 years of rich history, Absa is strongly positioned as a local bank with regional and international expertise. A career with us offers the opportunity to be part of an exciting growth journey, shaping our future as a proudly African group.
My Career Development Portal: Wherever you are in your career, we are here for you. Design your future with leading-edge guidance, tools, and support to unlock your potential. You are Absa. You are possibility.
Job Title: Head of Cyber Security Management
Job Summary:
The Head of Cyber Security Management is responsible for developing, implementing, and managing the organization’s information security strategy to protect digital assets, data, and technology infrastructure. This role ensures confidentiality, integrity, and availability of information systems while aligning security initiatives with business objectives and regulatory requirements.
The position provides strategic leadership in risk management, cybersecurity governance, and compliance, fostering a culture of security awareness across the organization. The Head of Cyber Security Management collaborates with technology teams, Group Security Officer Team (CSO), and executive leadership to integrate security into enterprise architecture, supporting business growth, digital transformation, and third-party engagements.
Key Responsibilities:
1. Strategic Leadership
- Develop, implement, and execute an enterprise-wide information security strategy aligned with business objectives.
- Advise executive leadership and the Board on emerging security threats, trends, and compliance requirements.
2. Risk Management
- Identify, assess, and mitigate cyber and technology risks across all business units.
- Establish and maintain a risk management framework with regular risk assessments.
3. Policy & Governance
- Define and enforce security policies, standards, and procedures.
- Ensure compliance with regulatory and industry standards (e.g., ISO 27001, GDPR, NIST).
4. Incident Response & Recovery
- Lead the organization’s incident response program, including detection, containment, and remediation.
- Develop and maintain disaster recovery and business continuity plans.
5. Security Architecture & Operations
- Oversee the design and implementation of secure systems, networks, and applications.
- Manage the Security Operations Center (SOC) in collaboration with Absa Group Team for continuous threat monitoring.
6. Awareness & Training
- Promote a culture of security awareness through training and communication programs.
- Educate employees and stakeholders on cybersecurity best practices.
7. Vendor & Third-Party Risk
- Assess and manage security risks from vendors, partners, and third-party services.
- Ensure contractual obligations include adequate security measures.
8. Budget & Resource Management
- Develop and manage the information security budget.
- Allocate resources effectively to support security initiatives.
9. Reporting & Metrics
- Provide regular reports to executive leadership and the Board on security posture, incidents, and risk.
- Define and track key performance indicators (KPIs) for security programs.
10. Cyber Security Technical Duties
- Conduct technical security risk assessments and recommend controls.
- Assess threats and vulnerabilities to information assets and recommend technical security measures.
- Oversee threat vulnerability assessments, remediation, and cyber resilience management.
- Validate baseline security configurations for operating systems, applications, databases, and networks.
- Engage with third-party vendors for security evaluations and due diligence.
- Conduct quarterly and annual cyber readiness exercises across business units.
11. Methodology and Governance
- Formulate organizational methodology for managing cyber and information security risks.
- Integrate and coordinate all business cyber and information security efforts.
- Develop frameworks for reporting and coordinating cyber activities across business units.
12. Team Management
- Develop a high-performing team through formal performance development and informal coaching.
- Encourage knowledge sharing and collaboration within the team.
13. Additional Responsibilities
- Monitor cyber security trends, threats, and emerging attack techniques.
- Form a Cyber-Incident Response Team and manage incident analysis and response.
- Develop metrics to evaluate effectiveness of security systems and procedures.
- Collaborate with relevant external institutions on cyber and information security issues.
Technical Skills / Competencies:
Education:
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field
- Master’s degree preferred
Experience:
- Minimum 10+ years in information security roles
- At least 5 years in a leadership position
Certifications:
- CISSP, CISM, CISA, or equivalent
Technical Expertise:
- Strong knowledge of cybersecurity frameworks, risk management, and compliance standards
- Proficiency in cloud platforms (AWS, Azure), DevSecOps, and Zero Trust Architecture
Leadership & Communication:
- Proven ability to lead cross-functional teams
- Influence executive decision-making
- Excellent verbal and written communication, including crisis communication
KPIs / Performance Metrics:
- Reduction in security incidents and breaches year-over-year
- Compliance with regulatory and industry standards
- Time to detect and respond to security incidents
- Employee security awareness training completion rates
- Vendor risk assessment completion and remediation timelines
Other Requirements / Competencies:
- Professional and confident interaction with staff at all levels
- Ability to work autonomously under pressure and meet tight deadlines
- Stay abreast of technology changes and financial services environment
- Occasional local and regional travel
- Entrepreneurial, commercial thinking, decision-making, and influencing skills
Communication & Interaction:
- Staff in own area: 30%
- Staff outside own area: 25%
- Internal customers: 30%
- External customers: 5%
- Regulators / Government Agencies: 10%
Absa Values:
- Trust
- Resourceful
- Inclusion
- Courage
- Stewardship
- Education
How to Apply:
To submit your application, please follow the link provided below.
To apply for this job please visit absa.wd3.myworkdayjobs.com.