Senior Manager: ICT Security Management at GEMS

Senior Manager: ICT Security Management at GEMS

Senior Manager: ICT Security will report directly to the Chief Information Officer and will be based at Head Office – Pretoria.

The total remuneration package will be between R1,613,106 and R2,016,382 per annum, determined in accordance with the Scheme's Remuneration Policy.

The closing date for applications will be Friday, 26 December 2025.

• Providing strategic and operational leadership of the enterprise information security function to ensure the ongoing confidentiality, integrity, and availability of GEMS information assets.
• Establishing and maintaining the ICT Security Framework, governance structures, and enterprise security architecture.
• Leading enterprise initiatives for cybersecurity policy, standards, and awareness across on premise, cloud, and hybrid environments.
• Overseeing security operations, including incident detection, response, monitoring, and vulnerability management.
• Ensuring compliance with applicable legislation, including POPIA, the Medical Schemes Act, KingIV, ISO
  27001, and internal risk and audit frameworks.
• Managing business continuity and disaster recovery planning, testing, and the integration of cyber resilience measures.
• Overseeing security solution acquisition, deployment, and lifecycle management to mitigate technology, operational, and compliance risks.
• Managing security budgets, vendor and contract performance, and third party risk assessments.
• Providing regular reporting, metrics, and briefings to Executive Management and relevant governance committees on the organisation's security posture.
• Leading and developing the information security team to ensure performance excellence, readiness, and continuous improvement through training, drills, and development plans.
• Collaborating with internal and external stakeholders including ICT, Risk, Audit, Legal, service providers, and regulators to support business aligned, secure operations.

• A Bachelor's degree or Advanced Diploma in Computer Science, Information Security, Information Systems, or a related field.
• A postgraduate qualification in Cybersecurity, IT Governance, or Business will be advantageous.
• Professional certifications (preferred): CISSP, CISM, CISA, GIAC, CCSP, or ISO
  27001 Lead Implementer/Lead Auditor.
• A minimum of 8 years functional experience in Information Security, with at least 5 years in a managerial role leading security teams.
• Demonstrated experience in enterprise security governance, architecture, risk management, SOC operations, and incident response.
• Strong understanding of network and cloud security (Azure/AWS), POPIA, and cyber risk frameworks (ISO
  27001, NISTCSF).
• Experience engaging with executive committees, audit processes, and security assurance programs.

• Strong leadership, analytical, and strategic planning capability.
• Excellent business and technical acumen with deep understanding of cybersecurity principles.
• Proven ability to implement and govern secure‑by‑design practices.
• Effective stakeholder management and communication at senior levels.
• Demonstrated problem‑solving, risk assessment, and decision‑making skills.
• High level of resilience and adaptability when managing incidents under pressure.
• Excellent report‑writing, presentation, and documentation control skills.

• Integrity:
  Acts responsibly, ethically, and protects sensitive information.
• Accountability:
  Owns delivery of outcomes, ensures governance and compliance.
• Strategic Thinking:
  Aligns information security with organisational strategy and risk appetite.
• Collaboration:
  
  Partners across ICT, Risk, Audit, and Business to enable secure outcomes.
• Decision‑Making:
  Applies sound judgment under pressure.
• Innovation:
  Modernises security practices and drives continuous improvement.
• Resilience:
  Maintains composure and performance under demanding conditions.
• Service Orientation:
  Provides responsive, business‑aligned security support.
• People Development:
  Coaches, motivates, and builds team capability.

• Experience with in a medical scheme, financial services, or other regulated industry.

GEMS employs people with the…