Deputy Director: ICT Security – Secure the Future of Digital Health
The National Department of Health (NDOH) is offering an exciting opportunity for a skilled and experienced professional to join its Information Communication Technology Directorate as a Deputy Director: ICT Security. This position is based in Pretoria and plays a critical role in safeguarding the department’s digital infrastructure and sensitive information.
If you are passionate about cybersecurity, risk management, and protecting critical systems in a high-impact environment like healthcare, this role offers both challenge and purpose.
Salary and Remuneration
- Salary: R896,436 per annum (all-inclusive package)
- Structure: The package includes a basic salary (70%–75%) structured according to Middle Management Service (MMS) guidelines
This competitive salary reflects the importance of the role in maintaining secure and resilient ICT systems within the public health sector.
Key Requirements
To succeed in this role, candidates must meet a combination of academic, technical, and professional criteria.
Educational Qualifications
- Grade 12 certificate
- NQF Level 7 qualification in:
-
- Information Technology
- Information Security
- Computer Systems (or related field recognized by SAQA)
Certifications (Advantageous)
- ITIL Foundation
- COBIT Certification
- Security certifications such as:
-
- Security+
- CISA
- CISSP
- CISM
- CRISK
Experience
- At least 3 years’ experience at Assistant Director level or equivalent
- Supervisory or team management experience
- Proven experience in an Information Security role
- Experience working with legal, audit, and compliance teams
- Experience developing and maintaining security policies, procedures, and standards
Knowledge and Technical Expertise
Candidates must demonstrate strong knowledge in the following areas:
- Information Security Frameworks:
-
- ISO 27000 series
- ISO 22301 (Business Continuity)
- ISO 38500 (IT Governance)
- ISO 31000 (Risk Management)
- ITIL and COBIT frameworks
- ICT Governance and Risk Management:
-
- Governance, risk, compliance, and continuity methodologies
- ICT infrastructure lifecycle management
- LAN and WAN network technologies
- System Security and Operations:
-
- Backup, restore, disaster recovery, and archiving
- ICT system development and control processes
- Legislation and Policy Frameworks:
-
- DPSA Corporate Governance of ICT Policy Framework
- Cloud Security Policy
- Government Wide Enterprise Architecture
Key Skills
- Strong communication (verbal and written)
- Analytical thinking and problem-solving
- Project management and planning
- Policy development and implementation
- Leadership and people management
- Decision-making and organizational skills
- Computer literacy (MS Office and related tools)
- Valid driver’s license
Key Duties and Responsibilities
The Deputy Director: ICT Security will be responsible for developing, implementing, and managing the department’s information security strategy. This role requires both strategic oversight and operational execution.
Strategic Security Management
- Develop and implement a comprehensive information security and IT risk management program.
- Align ICT security strategies with organizational goals and business objectives.
- Ensure the confidentiality, integrity, and availability of all departmental information.
Risk and Compliance Management
- Monitor and enforce compliance with security standards and policies.
- Minimize risks through proactive risk identification and mitigation strategies.
- Work closely with auditors and compliance teams to address security audit findings.
- Ensure adherence to relevant legal and regulatory requirements.
ICT Security Operations
- Provide ongoing ICT security support across the department.
- Ensure secure configuration of hardware, software, and applications.
- Support the design and implementation of secure, scalable ICT systems.
- Oversee backup, disaster recovery, and data protection processes.
Vendor and Stakeholder Management
- Manage outsourced vendors providing security services.
- Ensure vendors comply with service-level agreements (SLAs)
- Act as a security liaison between ICT teams, management, and external stakeholders
- Promote collaboration between IT, security, and business units.
Security Architecture and Advisory
- Provide expert advice on security architecture and system design.
- Ensure security is integrated into all ICT projects and initiatives.
- Guide IT teams on best practices for secure system implementation.
Team and Project Management
- Manage ICT security personnel and projects.
- Ensure alignment of security initiatives with organizational priorities.
- Monitor project progress and ensure timely delivery of outcomes.
- Support continuous improvement and innovation in security practices.
Key Factors for Success
KEY FACTOR: Information Security Leadership
Strong leadership in developing and implementing security strategies is essential to protect critical health systems and data.
KEY FACTOR: Risk and Compliance Expertise
A deep understanding of risk management and compliance frameworks ensures the department meets all legal and regulatory requirements.
KEY FACTOR: Technical Security Knowledge
Expertise in ICT systems, networks, and security frameworks enables effective protection against cyber threats and vulnerabilities.
KEY FACTOR: Strategic Thinking and Planning
The ability to align ICT security initiatives with broader organizational goals ensures long-term sustainability and effectiveness.
KEY FACTOR: Stakeholder and Vendor Management
Effective collaboration with internal teams and external service providers ensures seamless implementation of security measures.
Why This Role Matters
In today’s digital age, the protection of sensitive health information is more important than ever. This role directly contributes to strengthening South Africa’s healthcare systems by ensuring that digital platforms remain secure, reliable, and resilient.
By joining the National Department of Health, you become part of a mission-driven team working to enhance service delivery through secure and innovative technology solutions.
Enquiries
- Contact Person: Mr A. Mabuza
- Telephone: 012 395 8647
This is an excellent opportunity for experienced ICT security professionals who are ready to take on a leadership role and make a meaningful impact in the public sector. If you have the expertise, vision, and commitment to drive ICT security excellence, this position could be the next step in your career.