Snr Specialist IM Security IT & OT

Valterra Platinum, formerly Anglo American Platinum, is a leading primary producer of platinum group metals (PGMs), with integrated mining, smelting, and refining operations in South Africa and Zimbabwe, marketing the metal we produce globally. Following our demerger from Anglo American plc, Valterra Platinum is now an independent, publicly listed company with a primary and secondary listing on the Johannesburg and London stock exchanges respectively.

As we embark on this exciting new chapter, Valterra Platinum is positioned to define and pursue its own strategy, anchored in operational excellence, sustainability, and value creation for the long-term. With full accountability for our performance and growth, we are focused on strengthening our capabilities across the entire PGM value chain, from mine to market.

Our independence empowers us to deepen our commitment to stakeholders and lead with purpose – to Unearth Value to Better Our World. We remain steadfast in our ambition to be the world’s foremost producer of platinum group metals, while embedding safety and sustainability in everything we do.

If you're driven by purpose and the opportunity to make a lasting impact, we invite you to join us. Apply today and be part of something bigger.

Number of positions: 01

Location: Corporate Office, Rosebank

This role is responsible for defining, leading and managing the implementation of cybersecurity initiatives to protect Valterra Platinum’s IT and OT hybrid networking environment. This includes developing secure IT/OT architecture, enforcing compliance with industry standards, and implementing controls to strengthen IT/OT cybersecurity posture. The role leads projects to secure IT and OT networks, systems, manage IT/OT threat and vulnerability programs, and collaborates with internal teams and external partners to ensure the protection of critical infrastructure.

Job responsibilities include (but are not limited to):

• Lead and manage the development of the IT/OT cybersecurity capability across all operations.
• Lead, design, and manage cybersecurity solutions for securing IT/OT network and infrastructure environments.
• Lead the discovery, monitoring, and management of OT, IoT, IIoT systems and applications.
• Develop and manage an IT and an OT asset inventory program.
• Develop and maintain an IT and an OT specific cybersecurity controls program aligned with ISA/IEC 62443, NIST 800-82, NIST CSF, and Zero-Trust principles.
• Develop and maintain an IT and an OT specific cybersecurity risk program.
• Design, manage, and continuously improve controls effectiveness of IT and OT firewall technology across all operations.
• Develop and maintain an and IT and an OT vulnerability management/remediation program, in collaboration with managed security operations centre (MSOC), IM Infrastructure (e.g Cloud Infrastructure and on-premise networking infrastructure, and IM Business Applications (OT).
• Maintain documentation and reporting for compliance and operational visibility.
• Support incident response and forensic investigations in OT environments.
• Collaborate with OT engineering, automation, and IT teams to ensure secure OT/IT integration
• Collaborate with other cybersecurity teams to conduct regular OT cybersecurity assessments, reviews, and audits.
• Collaborate with Enterprise Risk Management (ERM) and other IM functions and contribute towards the development and maintenance of business impact analysis (BIAs) and business continuity plans (BCPs) for OT.
• Collaborate with IM governance, risk, & compliance (GRC) to develop and maintain disaster recovery plans (DRPs) for OT systems/applications.
• Act as the primary point of contact for internal and external audits concerning controls for IT and OT security.
• Provide training and guidance to IM teams and business stakeholders on best practices for securing IT and OT environments.
• Prepare and present regular metrics and key risk indicators (KRIs) on the overall health and security posture of the organisation’s IT and OT landscape to IM management and business stakeholders.
• Research, evaluate, and recommend new security technologies and approaches to stay ahead of evolving threats…