John Duminy

I am passionate about and have more than 30 years ITC including Information Security Management experience. I am currently contracted as a Senior IT GRC Manager at UCT reporting to the ICTS Director: Governance Support Services. Previously I was contracted at Woolworths as an IT GRC Specialist responsible for Threat & Vulnerability Management with a key focus on assisting Woolworths to implement PCI requirements and maintaining annual compliance. I have used the COBIT, NIST, CIS & ISO27001 frameworks extensively to implement Information Security best practice and requirements. I am well skilled at writing policies, standards and procedures and performing risk assessments including risk remediation and coordination. My management experience includes roles as CISO and managing teams.

Information Security Management; IT Governance, Risk & Compliance Specialist; Cybersecurity Management; Security Strategy, Roadmap & Implementation; Threat and Vulnerability Management; Security Incident Management; BCP & DRP Projects; SOX, PCI & POPIA Compliance; Policies, Standards & Procedures; DevSecOps; Security Awareness & Education; IT Risk Management; Third Party Risk Assessments; Systems Security Reviews

Certified Information Systems Security Professional;

Certified Information Security Manager;

National Diploma - Computer Data Processing;

Project Management;