ICT Security Specialist

Boardroom Appointments; Cape Town; On-site; ZAR 600,000 - 900,000; Full time

Job summary

Boardroom Appointments is seeking an ICT Security Specialist to implement and maintain security for company assets in line with ISO standards. You will review vulnerabilities, update policies, and audit systems to identify risks across the IT landscape.

You will deploy new security solutions, protect credentials, and provide sound security advice to clients. A strong background in Microsoft technologies and frameworks like ISO27001 is essential.

Qualifications

• Bachelor's degree in Computer Science, IT or Information Systems required.
• Five years of experience in a security related field preferred.
• Experience with Microsoft technologies preferred.

Responsibilities

• Support and maintain security tools and systems.
• Lead vulnerability management initiatives and remediation.
• Update and enforce information security policies and procedures.
• Audit systems to identify weaknesses and vulnerabilities.
• Deploy and integrate new security solutions into production.
• Document security processes and controls in a central repository.
• Assist with cyber security awareness campaigns and training.

Skills

Vulnerability assessment

Security tooling

Policy development

Incident response

Encryption

Endpoint protection

Education

Bachelor's degree in Computer Science/IT/Information Systems

ISO 27001 knowledge (training/certification)

Tools

Qualys

Forti Analyzer

Symantec Endpoint Protection

Encryption tools

Job description

As an ICT Security Specialist, you will be responsible for implementing and maintaining the security of company assets in accordance with industry standards. You will also ensure that all internal processes are in line with regulations and best practice guidelines. Your responsibilities include reviewing vulnerabilities to identify potential issues; updating policies, procedures and documentation as required; auditing systems to find any weaknesses or vulnerabilities within them; setting up new systems/applications from scratch where necessary; ensuring that critical assets are kept secure at all times by protecting access credentials. You'll have a thorough understanding of cyber security legislation and requirements including ISO 27001:2013 (Information Security Management System), COBIT 5, ITIL v3 (Service Desk) etc.

Duties and responsibilities:

• Technical and Support of new and existing security tools
• Security initiatives as and when required
• Ensuring they keep up to date on procedures and best practice relevant to their job responsibilities
• Reporting any possible and actual breaches, errors, or complaints
• Working with Qualys Vulnerability
• Management and Web Application
• Work with Forti Analyzer critical information on threats across the entire attack surface
• A very good knowledge of Symantec Endpoint Protection and Encryption
• Knowledge of industry frameworks (ISO 27001/2, COBIT, ITIL)
• Ensure that all Information Security policies and procedures are followed according to the Client requirement
• Provide sound security advice to Clients clients
• Creation of hardening Standards for ICS department
• Assist with Cyber security awareness campaigns
• Assist with ICS Audits and Risks
• Maintain the technical risk register
• Assist departments that are struggling to remediate vulnerabilities
• Enhancements and Implementation
• Deployment of new security solutions to Production
• Initiate, recommend, and implement new solutions
• Conduct assessment of proposed solutions and existing solutions
• Documenting security processes and storing them in a shared document repository

Qualifications and experience:

• Bachelors degree in Computer Science, IT or Information Systems required
• Five years of experience in a security related field
• Experience with Microsoft technologies preferred