Information Security Specialist (24 Months Fixed-Term Contract)

Kamo Placements; Pretoria; On-site; ZAR 600,000 - 900,000; Full time

Job summary

Kamo Placements is seeking an Information Security professional to design, implement, and manage security controls across the company. You will define access privileges, conduct risk assessments, and drive vulnerability remediation and cloud security initiatives.

You will respond to audit findings, maintain standardised security procedures, and collaborate with IT users to ensure policy conformance and incident reporting.

Qualifications

• National Diploma in Information Technology or relevant equivalent qualification at NQF level 6.
• A minimum of five (5) years experience in IT governance and security.
• Certifications in ITIL Foundation, Security+, CISM, CISSP, SCCM, and COBIT will be an added advantage.

Responsibilities

• Designing, installing, and managing security mechanisms that protect the company network and information systems against breaches, viruses, and anti-spyware.
• Upgrading systems by implementing and maintaining security controls.
• Protecting the system by defining access privileges, control structures, and resources.
• Developing and implementing standardised Information Security processes and procedures.
• Responding to internal and external audit findings timeously.
• Conducting IT risk assessments and group policy management.
• Assisting with Penetration testing and vulnerability assessments.
• Driving vulnerability management, security hardening, and remediation programmes or projects.
• Remediate cloud security findings, vulnerabilities, and penetration test results.
• Ensuring Endpoint protection is always managed and configured properly.
• Ensuring Information System compliance and conformance to IT policies and processes.
• Ensuring that systems and procedures follow industry standards (ISO, etc.).
• Liaising with departments and IT users to ensure compliance and correction of IT security issues.
• Research, plan, and implement information security technical solutions to meet business requirements.
• Proactively monitor, investigate, and report on information security incidents, Internet use, and ICT policy breaches.
• Carrying out assignments and tasks delegated by line and senior management.

Education

National Diploma in Information Technology

Tools

Azure Active Directory

Cisco Meraki

Checkpoint Firewall

Sophos Firewall

SCCM

Intune

Mimecast

ManageEngine Log360

Group Policy Management

Job description

JOB DESCRIPTION

Designing, installing, and managing security mechanisms that protect the company network and information systems against breaches, viruses, and anti-spyware. Upgrading systems by implementing and maintaining security controls. Protecting the system by defining access privileges, control structures, and resources. Developing and implementing standardised Information Security processes and procedures. Responding to internal and external audit findings timeously. Conducting IT risk assessments and group policy management. Assisting with Penetration testing and vulnerability assessments. Driving vulnerability management, security hardening, and remediation programmes or projects. Remediate cloud security findings, vulnerabilities, and penetration test results. Ensuring Endpoint protection (Antivirus Software) is always managed and configured properly. Ensuring Information System compliance and conformance to IT policies and processes. Ensuring that systems and procedures follow industry standards, e.g., ISO . Liaising with all departments and IT users to ensure compliance and correction of all IT security issues. Research, plan, and implement information security technical solutions to meet business requirements. Proactively monitor, investigate, and report on information security incidents, Internet use, and ICT policy breaches. Carry out assignments and tasks delegated by line and senior management in line with companys operational requirements.

JOB REQUIREMENTS

National Diploma in Information Technology or a relevant equivalent qualification at NQF level 6. A minimum of five (5) years experience in IT governance and security. Certifications in ITIL Foundation, Security+, CISM, CISSP, SCCM, and COBIT will be an added advantage.

SKILLS AND KNOWLEDGE BASE

Knowledge of Patch management, antivirus, vulnerability management, and Intune management. Knowledge of penetration testing. Knowledge of Active Directory, Azure, and Cisco Meraki. Knowledge of Group Policy Management and Firewalls (Checkpoint, Sophos). Knowledge of Mimecast, Azure Active Directory, and Cloud Security. Knowledge of ManageEngine products (Desktop Central, Log 360, Ops Manager). Proficiency in TCP/IP/Routers/Switches/Firewalls. Server operating systems and security. Analytical and problem-solving skills. Project Management, presentation, and report writing. Customer-centricity, communication, interpersonal, and emotional Intelligence.