SECURITY ENGINEER : ASSURANCE ICT SECURITY OFFICE

Financial Sector Conduct Authority; Pretoria; On-site; ZAR 40 000 - 80 000; Full time

Job summary

An established industry player is seeking an ICT Security Engineer to enhance its cyber security posture. This pivotal role involves conducting security assurance activities, managing identity governance, and ensuring compliance with best practices. The successful candidate will collaborate with ICT stakeholders to mitigate risks and foster a culture of security awareness. Join a forward-thinking organization committed to inclusivity and the representation of marginalized groups, where your contributions will significantly impact the organization's security landscape.

Qualifications

• Experience in conducting security assurance activities and maturity assessments.
• Ability to manage identity governance and access management solutions.

Responsibilities

• Coordinate annual cyber security assurance and penetration testing.
• Prepare monthly reports on ICT security events and incidents.

Skills

Cyber Security Assurance

Identity Governance

Data Security

Risk Management

Communication Skills

Tools

Data Loss Prevention (DLP)

Identity Threat Protection

Intrusion Prevention Solutions

Job description

The ICT Security Engineer : Assurance, will play a critical role in safeguarding the organisation's information and cyber security posture. This position is responsible for conducting security assurance activities, including maturity assessments, governance and policy reviews, and supply chain information security due diligence. The engineer will also oversee identity governance and access management, including data security and system access management, ensuring that the organisation adheres to industry best practices and regulatory requirements. The successful candidate will collaborate with various ICT stakeholders to improve security measures, mitigate risks, and encourage a culture of security awareness across the organisation.

Key Performance Areas :

• Coordinate the annual information and cyber security assurance, control self-assessments and security penetration testing.
• Ensure that the identity governance and access administration (IAM) solution performs in line with the service level commitments.
• Ensure that the data loss prevention (DLP) solution performs in line with the service level commitments.
• Manage and maintain identity threat protection and intrusion prevention solutions, and ensure that they function optimally.
• Prepare monthly reports on ICT security events, incidents, breaches and policy or process violations in line with the response plans (CSIRP and CMP).
• Prepare monthly operational reports on ICT security and risks, for presentation at management committees.
• Coordinate the review of ICT security policies, standards and procedures in line with industry frameworks.
• Ensure that ICT security risk register, and mitigation plans are updated quarterly or as required.
• Coordinate the information requests for governance, assurance, audit and control assessments.

Other Key Competencies :

The candidate must demonstrate the following skills and attributes : Good verbal and written communication skills, interpersonal skills, and must collaborate effectively with other team members. The candidate must be energetic, have the ability to learn new concepts fast, work independently and under pressure when it is required.

FSCA is committed towards increasing the representation of marginalised groups in line with its Employment Equity Plan. People with disabilities are encouraged to apply.

Please note that correspondence and communication will only be conducted with shortlisted candidates and that the FSCA reserves the right not to appoint if a suitable candidate is not identified.