Information Security Specialist

Letshalo Hr Services; Gauteng; On-site; ZAR 600,000 - 900,000; Full time

Job summary

Letshalo Hr Services client in Centurion, Gauteng is seeking an Information Security Specialist to plan, manage and administer network security in line with approved guidelines and processes.

The role includes designing security controls, conducting risk assessments, assisting with penetration testing, and driving vulnerability management. Strong analytical thinking and excellent communication are essential.

Qualifications

• National Diploma in Information Technology or equivalent at NQF level 6 is required.
• Minimum 5 years' experience in IT governance and security is required.
• Certifications in ITIL Foundation, Security+, CISM, CISSP, SCCM, and COBIT will be an added advantage.

Responsibilities

• Design, install, and manage security measures protecting networks and information systems.
• Upgrade systems by implementing and maintaining security controls.
• Define access privileges, control structures, and resources to protect systems.
• Develop and implement standardised information security processes and procedures.
• Respond to internal and external audit findings promptly.
• Conduct IT risk assessments and manage group policy.
• Assist with penetration testing and vulnerability assessments.
• Drive vulnerability management, security hardening, and remediation projects.
• Remediate cloud security findings, vulnerabilities, and pen test results.
• Ensure endpoint protection is managed and configured properly.
• Ensure information system compliance with IT policies and standards.
• Ensure systems follow industry standards.
• Liaise with departments to ensure compliance and correction of security issues.
• Research, plan, and implement information security solutions meeting business needs.
• Monitor, investigate, and report information security incidents and ICT policy breaches.
• Carry out tasks delegated by management.

Skills

Analytical thinking

Strong communication

Problem solving

Project management

Presentation and report writing

Customer-centricity

Interpersonal skills

Emotional intelligence

Education

National Diploma in Information Technology or equivalent (NQF level 6)

Tools

Active Directory

Azure

Cisco Meraki

Intune

Mimecast

Group Policy Management

Firewalls (Checkpoint, Sophos)

ManageEngine (Desktop Central, Log360)

Job description

Our client is looking for an Information Security Specialist who possess technical skills, analytical thinking and strong communication abilities to join the team.
Purpose of the job:
The purpose of the job is to plan, manage, and administer the network security. Ensure all network components are managed in accordance with approved guidelines and processes to ensure compliance.

Key Responsibilities:

• Designing, installing, and managing security mechanisms that protect the network and information systems against breaches, viruses, and anti-spyware.
• Upgrading systems by implementing and maintaining security controls.
• Protecting the system by defining access privileges, control structures, and resources.
• Developing and implementing standardised Information Security processes and procedures.
• Responding to internal and external audit findings timeously.
• Conducting IT risk assessments and group policy management.
• Assisting with Penetration testing and vulnerability assessments.
• Driving vulnerability management, security hardening, and remediation programmes or projects.
• Remediate cloud security findings, vulnerabilities, and penetration test results.
• Ensuring Endpoint protection (Antivirus Software) is always managed and configured properly.
• Ensuring Information System compliance and conformance to IT policies and processes.
• Ensuring that systems and procedures follow industry standards.
• Liaising with all departments and IT users to ensure compliance and correction of all IT security issues.
• Research, plan, and implement information security technical solutions to meet business requirements.
• Proactively monitor, investigate, and report on information security incidents, Internet use, and ICT policy breaches.
• Carry out assignments and tasks delegated by line and senior management in line with operational requirements.
• National Diploma in Information Technology or a relevant equivalent qualification at NQF level 6.
• A minimum of five (5) years' experience in IT governance and security.
• Certifications in ITIL Foundation, Security+, CISM, CISSP, SCCM, and COBIT will be an added advantage.
• Knowledge of Patch management, antivirus, vulnerability management, and Intune management.
• Knowledge of penetration testing.
• Knowledge of Active Directory, Azure, and Cisco Meraki.
• Knowledge of Group Policy Management and Firewalls (Checkpoint, Sophos).
• Knowledge of Mimecast, Azure Active Directory, and Cloud Security.
• Knowledge of ManageEngine products (Desktop Central, Log 360, Ops Manager).
• Proficiency in TCP/IP/Routers/Switches/Firewalls.
• Server operating systems and security.
• Analytical and problem-solving skills.
• Project Management, presentation, and report writing.
• Customer-centricity, communication, interpersonal, and emotional Intelligence.

Should you not receive a response within 2 weeks after the closing date, please consider your application unsuccessful.

Information Security Specialist Centurion, Gauteng, ZA