Information Security Specialist

KPMG South Africa; Johannesburg; On-site; ZAR 650,000 - 950,000; Full time

Job summary

The KPMG Africa Information Security Specialist is responsible for safeguarding confidentiality, integrity, and availability of systems across KPMG Africa offices. You will actively manage and monitor information security to detect, respond, and remediate risks and threats across our infrastructure.

Candidates should have 3–5 years in IT security with Azure experience and relevant certifications. The role covers incident response, vulnerability management, security operations and risk reporting

Qualifications

• 3–5 years’ experience in IT security including Microsoft Azure.
• Industry recognized certs A+, N+, Security+, CySA+ and cloud security certifications.
• Microsoft Certified: Security Operations Analyst Associate.
• Microsoft Certified: Information Protection and Compliance Administrator Associate.
• Microsoft Certified: Security, Compliance, and Identity Fundamentals.
• Microsoft Certified: Identity & Access Management.
• Microsoft Certified: Azure Security Engineer.
• CISM, CISSP, ECIH preferred.
• Strong knowledge of information security and cloud security concepts.
• Experience with identifying, analysing, and reporting on information security risk and incidents.
• Experience in security incident response, threat analytics, security operations, vulnerability management.

Responsibilities

• Incident Management: monitor incident channels and escalate high-priority issues.
• Security Systems Configuration and Management: monitor, configure and manage security systems.
• Patch Management: monitor performance and ensure compliance.
• Threat and Event Monitoring: detect threats and escalate as needed.
• Vulnerability Management: monitor, asset reconciliation, remediation actions, and support testing.
• Support NITSO Projects and team initiatives.

Skills

Information security

Cloud security

Threat analytics

Security operations

Education

Professional/Tertiary

Tools

Qualys

Microsoft Defender for Endpoint

Microsoft Sentinel

Job description

1 Position Details

Position

Information Security Specialist

Business Unit

Quality and Risk Management

Managing any People

No

2 reports to

Chief Information security officer

3 Overall Purpose Of The Role

The KPMG Africa Information Security Specialist is to assist with ensuring the confidentiality, integrity, and availability of all systems across the KPMG Africa offices (South Africa, Botswana, Mauritius, Mozambique, Namibia, Zambia, Zimbabwe, Nigeria, Ghana, Kenya, Uganda, Tanzania, and Rwanda). The KPMG Africa Information Security Specialist is to achieve by actively managing and monitoring information security system in order to detect, respond and remediate information security risks and threats across the infrastructure.

4 Position Specifications

4.1 Educational (minimum level necessary to perform the job)

4.1.1 Professional/Tertiary

• Professional
  
  

4.2 Other requirements

4.3 Experience (minimum necessary before being considered for the job)

Desired Qualification And Experience

• 3 - 5 years’ experience in Information Technology Support or Information Security including Microsoft Azure
• Industry recognized qualification A+, N+, Security +, CySA+, including Cloud Security certifications such as,
• Microsoft Certified: Security Operations Analyst Associate
• Microsoft Certified: Information Protection and Compliance Administrator Associate
• Microsoft Certified: Security, Compliance, and Identity Fundamentals
• Microsoft Certified: Identity & Access Management
• Microsoft Certified: Azure Security Engineer
• Professional certification preferred but not required (CISM, CISSP, ECIH)
• Ability to demonstrate strong knowledge of information security and cloud security concepts.
• Experience with identifying, analysing, and reporting on information security risk and incidents.
• Meaningful work experience in information security environments, including security incident response, threat analytics, security operations, vulnerability management and security risk management.
• Demonstrated knowledge of security related tools, systems, and applications such as Qualys, Microsoft Devender Endpoint, Microsoft Sentinel, etc.
• Experience with evaluating security vulnerabilities, developing mitigation strategies, and implementing remediation.
• Strong knowledge of operating systems and application technologies e.g., Microsoft Servers, Active Directory.
• Strong Knowledge in Network infrastructure protocol and technologies.

5 Core Competencies (Attributes)

• Attention to detail and accurate documentation
• Ability to analyse and interpret information
• Able to work independently and as part of a team
• Ability to organize and prioritise multiple tasks and work under pressure
  
  

6 List of Key Performance Areas & Key Performance Indicators

Main Responsibilities

List the tasks underpinning the responsibility

Incident Management

• Monitoring of incident response channels.
• Execution of the firms Information Security Incident Management Process and escalation of high priority issues.
• Continuous status tracking and escalation of open incidents.
• Produce weekly report for the CISO on incident remediation status across One Africa.
• Produce quarterly report for the CISO on incident status and trends across One Africa.
  
  

Security Systems Configuration and Management

• Daily monitoring of security systems to ensure they’re functioning appropriate .
• Configuration and management of the Information Security systems such as Vulnerability, Privileged Access and Log management systems.
• Asset reconciliation to ensure appropriate coverage of security systems such as vulnerability management, log management, etc.
• Producing reports for Operational IT Team and assist with issue prioritisation and resolution of system security configuration issues.
  
  

Monitoring of Patch Management

• Monitoring of the performance of the Patch Management processes and identification of process inefficiencies and risks.
• Investigating and escalation of challenges preventing compliance with standards.
  
  

Threat and Event Monitoring

• Detecting and Monitoring Information Security Threats and Events using the Information Security systems with appropriate escalation where required.
  
  

Vulnerability Management

• Daily monitoring of external and internal vulnerability management systems for newly discovered vulnerabilities.
• Monthly asset reconciliation to ensure that the appropriate assets are scanned.
• Initiate and manage vulnerability remediation actions with respective owners.
• Assist with ad-hoc and annual network penetration testing activities.
  
  

Support the implementation of NITSO Projects and other team initiatives

• Provide support with the execution of project or information security related initiatives.