Information Security Analyst III (Contract)

The Focus Group; Sandton; On-site; ZAR 900,000 - 1,300,000; Full time

Job summary

The Focus Group is seeking a Senior Information Security Specialist to provide expert advice on complex security issues and drive incident resolution within their field. You will analyse MIS logs, mentor staff, and ensure uptime while aligning with the information security strategy.

You will engage stakeholders, contribute to policy and process improvements, and stay current with industry developments, supporting business strategy and CSI initiatives.

Qualifications

• Advanced diplomas or National 1st Degrees required.
• CISSP or CISM certification (essential)
• Minimum 10–15 years IT experience with at least 2 years in a senior role and 3–5 years in information security technology

Responsibilities

• Build relationships with stakeholders to facilitate knowledge flow on new products and solutions.
• Manage and resolve incidents leveraging internal networks to strengthen relationships.
• Capture timesheets and claims timeously and accurately.
• Propose cost-effective solutions while meeting information security requirements.
• Provide input into vendor negotiations for new and existing technologies and services.
• Contribute to company culture, strategy and CSI initiatives.
• Stay abreast of developments to ensure personal and professional growth.
• Understand and embody the company vision and values; lead by example.
• Identify opportunities to improve business processes and systems.
• Participate in R&D related to information security technologies.
• Contribute to proof of technology and proofs of concept.
• Oversee implementation changes and assess for risks and shortcomings.
• Provide guidance to Administrators and analysts on security changes.
• Support achievement of business strategy and values.
• Mentor staff and develop career streams and role requirements.

Skills

Banking knowledge Level 1

Governance, Risk and Controls Level 1

Information Security policies and...

TCP/IP Level 1

Vendor Management Principles Level 1

Data analysis Level 1

System Development Life cycle(SDLC)

Education

Advanced Diplomas/National 1st Degrees

Job description

Job Purpose

To provide expert advice on complex aspects of information security within their fields of expertise. To identify and resolve complex technical issues related to security technologies. To collaboratively perform in-depth analysis with stakeholders on complex information security issues and provide optimum solutions which meet both business and technical requirements while aligning with the information security strategy. To analyse and enhance information security related processes with the aim to optimise work within the sphere of Information Security in its entirety. Working independently to deliver on work tasks. Pro-actively mentor staff. To ensure stability and up-time for areas the incumbent takes responsibility for; which also requires being available on demand to help solve issues outside of normal working hours

Job Responsibilities

• Build relationships with stakeholders to facilitate the flow of knowledge, input and discussion on new products and solutions as required.

• Leverage on expertise and internal networks to manage and resolve incidents, strengthening relationships.

• Capture timesheets and claims timeously and accurately.

• Propose solutions that are cost effective while meeting information security (IS) requirements within budget.

• Provide input into the negotiation process with vendors for new and existing technologies and services.

• Contribute to a culture of transformation by participating in company culture building initiatives, business strategy, and CSI.

• Stay abreast of developments in field of expertise, ensuring personal and professional growth.

• Understand and embrace the company vision and values, leading by example.

• Seek opportunities to improve business processes, models and systems.

• Participate in Research and Development related to specific Information Security Technology.

• Participate in proof of technology and proof of concept.

• Contribute to the content of the curricula.

• Oversee the implementation of the changes and check for the shortcomings and risks.

• Expert in-depth interpretation of MIS and system logs/reports to correct any deviations against best practices.

• Identify and set selection criteria for new products.

• Participate in the implementation and hand over of new products as provided in the selection criteria.

• Keep abreast of information security policies, rules, standards and processes, procedures and practices, as well as business rules, introducing new industry concepts to information security.

• Create and review all relevant processes and procedures mindful of current policies and standards.

• Create, maintain and review information security standards.

• Oversee and monitor environment per set standards.

• Review and contribute to project documentation.

• Mitigate risks. Implement specific Information security technologies.

• Gain further exposure and experience on multiple technologies.

• Log, submit and implement low, medium and high risk security changes independently.

• Provide guidance and supervision to Administrators and other analysts on implementation and changes.

• Oversee and ensure change was success.

• Support the achievement of the business strategy, objectives and values.

• Enable skilling and required corrective action to take place by sharing knowledge and industry trends with team.

• Obtain buy-in for developing new and/or enhanced processes that will improve the functioning of stakeholders' businesses.

• Provide technical mentoring related to specific security product.

• Participate in defining career stream and role requirements.

• Attend tech security industry forums and present technical papers.

• Provide technical mentoring both to individual and specialist development projects.

Essential Qualifications - NQF Level

• Advanced Diplomas/National 1st Degrees

Essential Certifications

• CISSP, CISM or relevant qualifications (this is essential certification )

Minimum Experience Level

• 10- 15 years experience in an IT environment of which at least 2 years in a senior role from feeding career streams and at least 3-5 years specialising in an Information Security technology

Technical / Professional Knowledge

• Banking knowledge Level 1

• Governance, Risk and Controls Level 1

• Relevant software and systems knowledge Level 1

• Relevant regulatory knowledge Level 1

• Microsoft Office Level 1

• Cluster Specific Operational Knowledge Level 1

• Business writing skills Level 1

• System Development Life cycle(SDLC) Level 1

• Information Security Threats and Attact vectors Level 1

• Principles of project management Level 1

• Basic computer concepts Level 1

• Information Security terms and definitions Level 1

• Administrative procedures and systems Level 1

• TCP/IP Level 1

• Vendor Management Principles Level 1

• Information Security policies and procedures Level 1

• Data analysis Level 1

• Relevant Operating System Level 1

Behavioural Competencies

Innovation

• Creating novel solutions with measurable value for existing and potential customers (internal or external); experimenting with new ways to solve work problems and seize opportunities that result in unique and differentiated solutions.

Collaborating

• Working cooperatively with others to help a team or work group achieve its goals.

Technical/Professional Knowledge and Skills

• Having achieved a satisfactory level of technical, functional, and/or professional skill or knowledge in position-related areas; keeping up with current developments and trends in areas of expertise; leveraging expert knowledge to accomplish results.

Coaching

• Engaging an individual in developing and committing to an action plan that targets specific behaviors, skills, or knowledge needed to ensure performance improvement or prepare for success in new responsibilities.

Influencing

• Using effective involvement and persuasion strategies to gain acceptance of ideas and commitment to actions that support specific work outcomes.

Decision Making

• Identifying and understanding problems and opportunities by gathering, analyzing, and interpreting quantitative and qualitative information; choosing the best course of action by establishing clear decision criteria, generating and evaluating alternatives, and making timely decisions; taking action that is consistent with available facts and constraints and optimizes probable consequences.