IT Security Officer

Imasfinance Co-Operative (Ltd); Gauteng; On-site; ZAR 500 000 - 700 000; Full time

Job summary

A financial organization in South Africa is seeking an Information Security Manager to oversee the security of infrastructure and implement security strategies. Responsibilities include managing access control, performing penetration tests, and developing IT security policies. The ideal candidate will have relevant security certifications and experience in Active Directory and network security.

Qualifications

• 3 years’ experience working with Active Directory.
• 2-3 years’ experience in Penetration Testing, Vulnerability Assessments, and Network Security.

Responsibilities

• Manage and monitor information security including hardware, network and software.
• Implement and maintain information security framework.
• Conduct internal and external penetration testing.

Skills

Problem solving

Planning and organizing skills

Time management skills

Ability to work independently

Education

Certified Ethical Hacker (CEH) or equivalent

Certified ISO/IEC 27002

Tools

Cisco Routers

Cisco Firewalls

Linux operating systems

Job description

Job Purpose:

The purpose of the position is to manage and monitor information security (hardware, network, telecoms and software) and control access authorization to mitigate risk to the organization.

Job Outputs:

• Provide input to the IT security strategy and IT security enhancements.
• Assist with development of the IT security policy, procedures and standards.
• Implement, maintain and ensure adherence to information security framework and information security plan.
• Maintain appropriate security measures and mechanisms to guard against unauthorized access and protect against reasonably anticipated threats and hazards.
• Perform internal and external penetration testing.
• Conduct Network Security and Auditing on infrastructure.
• Ensure that vulnerabilities are resolved in a timely manner.
• Conduct trend analysis and testing.
• Ensure implementation of access management processes.
• Authorise and manage access to IT facilities and infrastructure.
• Investigate unauthorised access, compliance and performance of administrative duties relating to security management.
• Back-ups and Disaster recovery plans developed and implemented.
• Facilitating business awareness regarding IT security and current trends.

Qualifications:

• Relevant technology certification; Certified Ethical Hacker (CEH) or equivalent / Security analyst, penetration testing certification
• Certified ISO/IEC 27002

The following certifications are an advantage:

• Certified ISO/IEC 27001 Foundation
• ITIL Certification
• CCNA Security
• CCNP Security
• Valid Code 08 Driving licence

Experience:

• 3 years’ experience working with Active Directory
• 2-3 years’ experience in:

1. Penetration Testing
2. Vulnerability Assessments
3. Network Security and Auditing
4. Cisco Routers and Switches
5. Cisco Firewalls
6. VPN wireless
7. Linux operating systems

Knowledge and Skills:

• Problem solving
• Planning and organizing skills
• Time management skills
• Ability to work independently