It Risk Analyst

It Ridge Technologies; Pretoria; On-site; ZAR 700 000 - 950 000; Full time

Job summary

A technology consultancy in South Africa is seeking a Cyber and Information Security Specialist to oversee penetration testing assessments and develop methodologies within the financial sector. The ideal candidate has a postgraduate degree in IT/Security, relevant security certifications, and extensive experience in cybersecurity. This role offers an opportunity to significantly enhance the cyber resilience of financial institutions.

Qualifications

• 5-8 years of experience in Information Technology.
• At least 4 years in Cyber and Information Security.
• Experience in the banking or financial sector preferred.

Responsibilities

• Plan and oversee cyber penetration testing assessments.
• Develop methodologies for simulated cyber-attacks.
• Gather and report on cyber threat landscape.

Skills

Cybersecurity expertise

Project management

Threat intelligence analysis

Education

Postgraduate degree in Information Technology / Security

Tools

CEH

CISM

CISSP

Job description

Responsibilities

Plan, coordinate, and oversee intelligence-based cyber and information security penetration testing assessments (simulated cyber-attacks) across banks, insurance companies, and market infrastructures.

Develop project methodologies for the use of external consultants to perform simulated cyber-attacks on the financial sector.

Create and maintain TIBER frameworks, methodologies, standards, and guidelines to assess the resilience of the sector.

Gather threat intelligence from various sources, prioritize cyber requirements, and report on the cyber threat landscape and status.

Collaborate with internal and external teams to achieve cyber resilience objectives and maintain strong industry relationships.

Stay informed of developments and changes in information security risk management and analyze their impact on the industry.

Requirements

Postgraduate degree (NQF 8) in Information Technology / Security.

Relevant Security Certification (CEH, CISM, CISSP) is an advantage.

5-8 years of experience in Information Technology, with at least 4 years in Cyber and Information Security.

Experience in the banking or financial sector is preferred.