Job description

CHIEF INFORMATION SECURITY OFFICER

Vedanta, a future focused and growth-oriented company is a fully integrated producer of Oil & Gas, Zinc – Lead – Silver, Aluminum, Power, Iron Ore & Steel, Copper & Nickel, Cobalt, Ferro-Chrome, and Manganese, with a fast-growing metal recycling capacity, and a broad range of critical minerals. We are a dominant player in power generation, transmission, renewable energy solutions, optical fiber and display glass manufacturing. With our world-class, low-cost and long-life assets, Vedanta contributes 1.4% towards India’s GDP.

Konkola Copper Mines (KCM) Plc a subsidiary of Vedanta Resources, is one of the largest copper producers in Zambia. The company’s growth trajectory presents exciting opportunities to leverage minerals and human resources to enhance stakeholder value and become Zambia’s pride.

To support this vision, KCM is recruiting:

MAIN ROLES & RESPONSIBILITIES

• Provide oversight of IT and OT security programs.
• Define and maintain security strategy, policies, and standards.
• Establish and improve ISMS per global standards.
• Escalate material risks per governance structures.
• Coordinate OT controls for ICS, SCADA, PLCs.
• Implement logging, monitoring, malware protection and Strengthen cybersecurity.
• Secure system acquisition, development, and change management.
• Manage supplier and third-party security.
• Maintain business continuity and disaster recovery controls.

REQUIREMENTS AND QUALIFICATIONS

• Bachelor’s degree in Information Security, Computer Science, IT, or related discipline.
• Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), ISO/IEC 27001 Lead Implementer or Lead Auditor.
• Minimum of 10–15 years’ experience in information security, cyber security, or IT risk management roles.
• At least 5–7 years’ experience in a senior leadership role overseeing enterprise information security programs.
• Proven work in industrial, regulated, IT and OT security environments.
• Demonstrated expertise with ISO 27001, regulatory audits, and assurance reviews.