Information Security Specialist (24 MONTH CONTRACT)

Esteem Recruitment; Centurion; On-site; ZAR 600,000 - 900,000; Full time

Job summary

Esteem Recruitment is seeking an Information Security Specialist to plan, manage and administer the CMS network security. You will design, install and manage security controls to protect information systems and ensure compliance with approved guidelines and processes.

The role requires five years in IT governance and security, relevant IT qualifications, and certifications such as ITIL, Security+, CISM or CISSP. Proficiency with AD, Azure, and cloud security is essential.

Qualifications

• Minimum five (5) years’ experience in IT governance and security.
• Certifications in ITIL Foundation, Security+, CISM, CISSP, SCCM, and COBIT are advantageous.
• Knowledge of Patch management, antivirus, vulnerability management, and Intune management.
• Knowledge of Firewalls (Checkpoint, Sophos).
• Knowledge of Cloud Security and Azure Active Directory.

Responsibilities

• Plan, manage and administer CMS network security.
• Design, install and manage security mechanisms protecting networks and information systems.
• Upgrade systems by implementing and maintaining security controls.
• Define access privileges, control structures and resources.
• Conduct IT risk assessments and respond to audit findings.
• Assist with penetration testing and vulnerability assessments.
• Drive vulnerability management and remediation programmes.
• Remediate cloud security findings and ensure endpoint protection is configured.
• Ensure compliance with IT policies and standards (ISO 27000).
• Collaborate with departments to address IT security issues.

Skills

Penetration testing

Vulnerability management

Group Policy Management

Communication

Analytical thinking

Education

National Diploma in Information Technology

Tools

Active Directory

Azure

Cisco Meraki

Microsoft Intune

Mimecast

Job description

The purpose of the job is to plan, manage, and administer the CMS network security. Ensure all network components are managed in accordance with approved guidelines and processes to ensure compliance. As an Information Security Specialist, you will be responsible for:

Designing, installing, and managing security mechanisms that protect the CMS network and information systems against breaches, viruses, and anti-spyware.

Upgrading systems by implementing and maintaining security controls.

Protecting the system by defining access privileges, control structures, and resources.

Developing and implementing standardised Information Security processes and procedures.

Responding to internal and external audit findings timeously.

Conducting IT risk assessments and group policy management.

Assisting with Penetration testing and vulnerability assessments.

Driving vulnerability management, security hardening, and remediation programmes or projects.

Remediate cloud security findings, vulnerabilities, and penetration test results.

Ensuring Endpoint protection (Antivirus Software) is always managed and configured properly.

Ensuring Information System compliance and conformance to IT policies and processes.

Ensuring that systems and procedures follow industry standards, e.g., ISO 27000 – 27004.

Liaising with all departments and IT users to ensure compliance and correction of all IT security issues.

Research, plan, and implement information security technical solutions to meet business requirements.

Proactively monitor, investigate, and report on information security incidents, Internet use, and ICT policy breaches.

Carry out assignments and tasks delegated by line and senior management in line with CMS’ operational requirements.

National Diploma in Information Technology or a relevant equivalent qualification at NQF level 6.

A minimum of five (5) years’ experience in IT governance and security.

Certifications in ITIL Foundation, Security+, CISM, CISSP, SCCM, and COBIT will be an added advantage.

Knowledge of Patch management, antivirus, vulnerability management, and Intune management.

Knowledge of penetration testing.

Knowledge of Active Directory, Azure, and Cisco Meraki.

Knowledge of Group Policy Management and Firewalls (Checkpoint, Sophos).

Knowledge of Mimecast, Azure Active Directory, and Cloud Security.

Knowledge of ManageEngine products (Desktop Central, Log 360, Ops Manager).

Proficiency in TCP/IP/Routers/Switches/Firewalls.

Server operating systems and security.

Analytical and problem-solving skills.

Project Management, presentation, and report writing.Customer-centricity, communication, interpersonal, and emotional Intelligence.