IT Security Analyst: Cape Town CBD

Isilumko Staffing; Cape Town; On-site; ZAR 200 000 - 300 000; Full time

Job summary

A leading staffing agency is seeking a Security Analyst in Cape Town. The role involves safeguarding the IT infrastructure, monitoring security protocols, conducting vulnerability assessments, and ensuring compliance with security standards. Ideal candidates have 2-4 years of experience in cybersecurity and relevant certifications. Immediate project involvement in the Business Process Outsource sector is expected.

Qualifications

• 2 to 4 years of experience in cybersecurity.
• Ability to develop incident response plans and reports.
• Knowledge of frameworks like ISO27001, GDPR, and NIST.

Responsibilities

• Monitor security systems and respond to incidents.
• Conduct vulnerability assessments and penetration testing.
• Prepare reports on security incidents and compliance.

Skills

Cyber Security Certifications

Azure Stack including Sentinel and Defender

Incident Management

Vulnerability Management

Communication skills

Job description

Security Analyst: Cape Town City Centre: Perm
Business Process Outsource Industry
Reporting to: Enterprise Architect

The Company replaced the core ERP solution and are now beginning a journey to develop Microsoft Dynamics Business Central, integrating alongside other fit for purpose technology solutions to improve processes, drive value, and enhance their customers’ retail experience.

The Technology department introduced an onsite‑offshore model, thus widening the Technology department capability to deliver cost‑effective solutions in a timely manner. The model has been tailored specifically for the department’s operations dynamics. The onsite component focuses on high‑impact tasks and immediate project requirements, ensuring that the solutions are closely aligned with expectations and policies/standards. The offshore team contributes by working on various aspects of the projects that can be effectively handled remotely, such as development, testing, and back‑end operations.

The Security Analyst is responsible for protecting an organisation’s IT infrastructure, safeguarding sensitive information, and ensuring compliance with relevant security policies and regulations. The role involves monitoring and analysing security systems, identifying vulnerabilities, and implementing appropriate measures to prevent data breaches and cyber‑attacks.

Security Monitoring and Analysis

• Monitor security systems, including firewalls, intrusion detection systems (IDS), and data loss prevention (DLP) systems.
• Analyse security alerts and logs to identify potential threats and vulnerabilities.
• Investigate security incidents and breaches, conducting thorough forensic analysis.

Threat Intelligence and Vulnerability Management

• Stay updated with the latest cybersecurity threats, vulnerabilities, and attack vectors.
• Conduct regular vulnerability assessments and penetration testing to identify and address security weaknesses.
• Implement and maintain vulnerability management processes.

Incident Response

• Develop and implement incident response plans and procedures.
• Lead the response to security incidents, coordinating with internal teams and external partners.
• Document incidents and response actions, providing detailed reports and recommendations for improvement.

Security Policy and Compliance

• Ensure compliance with relevant security policies, standards, and regulations (e.g., GDPR, ISO/IEC 27001).
• Assist in the development, implementation, and maintenance of security policies and procedures.
• Conduct security awareness training for employees.

Reporting and Documentation

• Prepare detailed reports on security incidents, vulnerabilities, and risk assessments.
• Maintain accurate documentation of security systems, policies, and procedures.
• Provide regular updates to management on the status of the organization’s security posture.

Essential Experience, Knowledge and Skills

• 2 to 4 years of experience.
• Cyber Security Certifications.
• Highly skilled in the Azure Stack including Sentinel and Defender.
• Good communications skills, especially to 3rd‑party providers.
• Good understanding of Incident Management / Incident Response.
• Good awareness of Vulnerability Management.
• Abilities to write Playbooks and processes to a very high standard.
• Awareness of frameworks such as ISO27001, GDPR and NIST.

Advantageous Qualifications and Experience

• ERP Knowledge desirable, but not essential.
• Business Central desirable, but not essential.

Contact Information

[e-mail]

Please email me a detailed CV.