Information Security Specialist (24 Month Contract)

Esteem Recruitment Ltd; Gauteng; On-site; ZAR 600,000 - 900,000; Full time

Job summary

Esteem Recruitment Ltd seeks an Information Security Specialist to plan, manage, and administer CMS network security. You will design and manage security controls to protect information systems and ensure compliance with guidelines and processes.

The role requires extensive experience in IT governance, security, risk assessments, and a range of technologies including Active Directory, Azure, and cloud security.

Qualifications

• Degree of expertise in IT governance and security practices.
• Experience with risk assessments and policy management.
• Familiarity with penetration testing and vulnerability assessments.
• Knowledge of patch management and endpoint protection.
• Experience with Active Directory, Azure, firewall and IDS/IPS concepts.
• Knowledge of cloud security controls and ITIL fundamentals.

Responsibilities

• Plan, manage, and administer CMS network security per approved guidelines.
• Design, install, and manage security controls to protect information systems.
• Upgrade systems by implementing security controls and patches.
• Define access privileges, control structures, and resources.
• Respond to audit findings and implement remediation plans.
• Conduct IT risk assessments and management of group policies.
• Liaise with departments to ensure compliance with IT security policies.
• Research, plan, and implement security solutions to meet business needs.
• Monitor and report information security incidents and policy breaches.

Skills

Analytical thinking

Project management

Communication

Problem-solving

Emotional intelligence

Education

National Diploma in IT (NQF 6)

Tools

Active Directory

Azure

Cisco Meraki

Intune management

Mimecast

ManageEngine Desktop Central

ManageEngine Log360

ManageEngine Ops Manager

Check Point / Sophos firewalls

Cloud Security

Job description

The purpose of the job is to plan, manage, and administer the CMS network security. Ensure all network components are managed in accordance with approved guidelines and processes to ensure compliance. As an Information Security Specialist, you will be responsible for:

Designing, installing, and managing security mechanisms that protect the CMS network and information systems against breaches, viruses, and anti-spyware.

Upgrading systems by implementing and maintaining security controls.

Protecting the system by defining access privileges, control structures, and resources.

Developing and implementing standardised Information Security processes and procedures.

Responding to internal and external audit findings timeously.

• Conducting IT risk assessments and group policy management.
• Assisting with Penetration testing and vulnerability assessments.
• Driving vulnerability management, security hardening, and remediation programmes or projects.
• Remediate cloud security findings, vulnerabilities, and penetration test results.
• Ensuring Endpoint protection (Antivirus Software) is always managed and configured properly.
• Ensuring Information System compliance and conformance to IT policies and processes.
• Ensuring that systems and procedures follow industry standards, e.g., ISO 27000 – 27004.
• Liaising with all departments and IT users to ensure compliance and correction of all IT security issues.
• Research, plan, and implement information security technical solutions to meet business requirements.
• Proactively monitor, investigate, and report on information security incidents, Internet use, and ICT policy breaches.
• Carry out assignments and tasks delegated by line and senior management in line with CMS’ operational requirements.

National Diploma in Information Technology or a relevant equivalent qualification at NQF level 6.

• A minimum of five (5) years’ experience in IT governance and security.
• Certifications in ITIL Foundation, Security+, CISM, CISSP, SCCM, and COBIT will be an added advantage.
• Knowledge of Patch management, antivirus, vulnerability management, and Intune management.
• Knowledge of penetration testing.
• Knowledge of Active Directory, Azure, and Cisco Meraki.
• Knowledge of Group Policy Management and Firewalls (Checkpoint, Sophos).
• Knowledge of Mimecast, Azure Active Directory, and Cloud Security.
• Knowledge of ManageEngine products (Desktop Central, Log 360, Ops Manager).
• Proficiency in TCP/IP/Routers/Switches/Firewalls.
• Server operating systems and security.
• Analytical and problem-solving skills.
• Project Management, presentation, and report writing.Customer-centricity, communication, interpersonal, and emotional Intelligence.