Vedanta, a future focused and growth-oriented company is a fully integrated producer of Oil & Gas, Zinc – Lead – Silver, Aluminum, Power, Iron Ore & Steel, Copper & Nickel, Cobalt, Ferro-Chrome, and Manganese, with a fast-growing metal recycling capacity, and a broad range of critical minerals. We are a dominant player in power generation, transmission, renewable energy solutions, optical fiber and display glass manufacturing. With our world-class, low-cost and long-life assets, Vedanta contributes 1.4% towards India’s GDP.

Konkola Copper Mines (KCM) Plc a subsidiary of Vedanta Resources, is one of the largest copper producers in Zambia. The company’s growth trajectory presents exciting opportunities to leverage minerals and human resources to enhance stakeholder value and become Zambia’s pride.

To support this vision, KCM is recruiting:

Responsibilities or duties

• Provide oversight of IT and OT security programs.
• Define and maintain security strategy, policies, and standards.
• Establish and improve ISMS per global standards.
• Escalate material risks per governance structures.
• Coordinate OT controls for ICS, SCADA, PLCs.
• Implement logging, monitoring, malware protection and Strengthen cybersecurity.
• Secure system acquisition, development, and change management.
• Manage supplier and third-party security.
• Maintain business continuity and disaster recovery controls.

Qualifications or requirements 

• Bachelor’s degree in Information Security, Computer Science, IT, or related discipline.
• Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), ISO/IEC 27001 Lead Implementer or Lead Auditor.

Experience needed

• Minimum of 10–15 years’ experience in information security, cyber security, or IT risk management roles.
• At least 5–7 years’ experience in a senior leadership role overseeing enterprise information security programs.
• Proven work in industrial, regulated, IT and OT security environments.
• Demonstrated expertise with ISO 27001, regulatory audits, and assurance reviews

• Provide oversight of IT and OT security programs.
• Define and maintain security strategy, policies, and standards.
• Establish and improve ISMS per global standards.
• Escalate material risks per governance structures.
• Coordinate OT controls for ICS, SCADA, PLCs.
• Implement logging, monitoring, malware protection and Strengthen cybersecurity.
• Secure system acquisition, development, and change management.
• Manage supplier and third-party security.
• Maintain business continuity and disaster recovery controls.

• Information Security
• Cyber Security
• IT Risk Management
• IT and OT security programs
• Security strategy, policies, and standards
• ISMS
• OT controls for ICS, SCADA, PLCs
• Logging, monitoring, malware protection
• Cybersecurity strengthening
• System acquisition, development, and change management
• Supplier and third-party security management
• Business continuity and disaster recovery controls
• ISO 27001
• Regulatory audits
• Assurance reviews

• Bachelor’s degree in Information Security, Computer Science, IT, or related discipline.
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• ISO/IEC 27001 Lead Implementer or Lead Auditor