Information Security Analyst

Gijima Holdings; Gauteng; On-site; ZAR 600,000 - 900,000; Full time

Job summary

Gijima Holdings is seeking an Information Security Analyst to uphold and enhance the organisation's cyber security posture across all units. You will lead threat monitoring, incident response, and disaster recovery initiatives, balancing technical expertise with strategic planning to keep the business secure and compliant.

The role requires extensive experience in security operations, governance, risk, and cloud/hybrid environments, with a proactive approach to protecting critical infrastructure

Qualifications

• National Diploma in Information Technology.
• CompTIA N+ certification.
• MCSA (Windows 10 and above).
• ITIL Foundation v4.
• Security+ certification.
• Microsoft 365 Modern Desktop Administrator Associate.
• Advantageous: CEH.

Responsibilities

• Implement and maintain the organisation's cyber security strategy.
• Conduct vulnerability assessments and penetration testing.
• Monitor, investigate and respond to security incidents.
• Coordinate incident response and remediation activities.
• Manage patch management and vulnerability management programmes.
• Develop and maintain security awareness initiatives.
• Support DR plans and business continuity efforts.
• Engage with stakeholders and service providers as needed.

Skills

Penetration Testing

Active Directory Administration

Azure Cloud and Hybrid Environments

Scripting and Automation

Vulnerability Assessments

Patch Management

EDR

Email Security

Data Encryption

Network Routing and Switching

Security Monitoring

Education

National Diploma in Information Technology

CompTIA N+

MCSA (Windows 10 and above)

ITIL Foundation v4

Security+

Microsoft 365 Modern Desktop Administrator Associate

CEH (Advantageous)

Tools

Azure Security Center

SIEM

Virtualisation Technologies

Job description

As the Information Security Analyst, you will be responsible for maintaining and enhancing the organisation's cyber security posture across all business units and hotels. You will lead security initiatives, monitor threats, drive compliance, manage incident response processes, and develop disaster recovery capabilities. This position requires a proactive professional who can balance technical expertise with strategic thinking while ensuring the business remains secure, compliant and operational.

Qualifications

• National Diploma in Information Technology
• CompTIA N+
• MCSA (Windows 10 and above)
• ITIL Foundation v4
• Security+
• Microsoft 365 Modern Desktop Administrator Associate

Advantageous Certifications

• Certified Ethical Hacker (CEH)

Minimum 4 years' experience in:

• Incident Response
• Intrusion Prevention
• Cyber Security Operations
• Advanced Server Support
• Advanced WAN/LAN Networking
• Operating Systems Administration
• Advanced Azure Support
• Virtualisation Technologies

Additional Requirements

• Valid Driver's Licence
• Own reliable transport
• Willingness to participate in an after-hours standby rotation
• Availability for critical business emergencies when required

Technical Skills Required

• Penetration Testing
• Active Directory Administration
• Azure Cloud and Hybrid Environments
• Scripting and Automation
• Vulnerability Assessments
• Patch Management
• Endpoint Detection & Response (EDR)
• Antivirus Management
• Email Security and Spam Filtering
• Data Encryption and Protection
• Network Routing and Switching
• Secure Certificates
• Virtualisation Technologies
• Disaster Recovery Solutions
• Immutable Backup Technologies
• Security Monitoring and Incident Response

Key Responsibilities

Cyber Security Operations

• Implement and maintain the organisation's cyber security strategy.
• Conduct vulnerability assessments and penetration testing.
• Monitor, investigate and respond to security incidents.
• Coordinate incident response and remediation activities.
• Manage patch management and vulnerability management programmes.
• Develop and maintain security awareness initiatives.

Governance, Risk and Compliance

• Ensure ongoing compliance with:
  • POPIA
  • GDPR
  • PCI-DSS
• Develop and maintain IT security policies and procedures.
• Conduct security assessments and compliance audits.
• Monitor adherence to security standards and controls.

Infrastructure and Cloud Security

• Secure and maintain:
  • Azure environments
  • Hybrid cloud environments
  • Servers and operating systems
  • Virtualisation platforms
  • Network infrastructure (WAN/LAN)
  • End-user devices
• Manage hardware and software security standards.
• Oversee email security, encryption and endpoint protection solutions.

Disaster Recovery and Business Continuity

• Develop and maintain Disaster Recovery (DR) plans and procedures.
• Conduct DR testing and report on outcomes.
• Support backup, recovery and immutable backup solutions.
• Ensure business continuity through proactive risk management.

Technical Support and Stakeholder Engagement

• Provide advanced security support to IT teams.
• Support technology projects and system implementations.
• Manage escalations with vendors and third-party service providers.
• Build strong relationships with internal stakeholders and suppliers.
• Participate in an after-hours standby and emergency support roster.