Lead Applications & Integration Security

It Ridge Technologies; Pretoria; On-site; ZAR 900 000 - 1 200 000; Full time

Job summary

A leading technology firm based in Pretoria is seeking an experienced security professional to provide technical leadership in application and integration security. The role involves managing secure Software Development Life Cycle standards, leading security audits, and engaging stakeholders for optimal security posture. The ideal candidate will have 8-10 years of experience in cybersecurity and frameworks, and relevant qualifications including a Bachelor's degree and certifications in application security. This position offers the opportunity to drive security best practices in a dynamic environment.

Qualifications

• 8-10 years' experience in secure SDLC frameworks and solutions.
• At least 5 years exposure to security governance best practices.
• Experience in penetration testing and application code reviews.

Responsibilities

• Implement and monitor divisional operational plans.
• Manage the development of secure SDLC procedures.
• Lead the vulnerabilities threat process for security posture.
• Address application security audit findings.
• Oversee compliance with security standards during projects.
• Develop Major Incident Response Procedures for security breaches.
• Conduct training on secure development for stakeholders.
• Provide reports and analytics on application security landscape.
• Identify and mitigate security risks related to applications.
• Stay updated on application security best practices.
• Engage stakeholders to ensure sound security posture.

Skills

Technical leadership

Application security expertise

Cybersecurity vulnerability management

SDLC standards management

Stakeholder engagement

Education

Bachelor's degree in Information Systems and Management

Certification in Application Security Engineer (SACE)

Certified Ethical Hacker (CEH)

Job description

Overview

The main purpose of this position is to provide technical leadership and guidance in the application and integration security function, in support of secure business applications development, implementation and maintenance.

Responsibilities

• Contribute to the compilation of divisional operational plans and take responsibility for the implementation as well as the monitoring thereof.
• Manage and direct the development and maintenance of the secure Software Development Life Cycle procedures and standards based on the environment and manage the implementation thereof ensuring that the solutions are free from cybersecurity vulnerabilities.
• Lead and manage the vulnerabilities threat process in support of building an advanced security posture for the Organisation.
• Address the application and integration security audit findings to reduce the threat landscape and improve its application security posture.
• Lead and guide the security component of the information technology (IT) projects, upholding code reviews and ensuring compliance with security standards during each stage of the project development life cycle.
• Contribute to the development of the Security Major Incident Response Procedures and manage the implementation thereof, during a security breach.
• Drive the application and integration security awareness campaigns and oversee training to all key stakeholders (including developers, testers and business analysts) on secure development.
• Provide consolidated and integrated reports and analytics for various forums pertaining to the application and integration security landscape.
• Identify and mitigate risks related to the application and integration security environment and ensure compliance with relevant governance frameworks.
• Keep abreast of best practices and development in the field of application and integration security and ensure continuous improvement, while ensuring the optimal use of security best practice with the development of new solutions.
• Lead stakeholder engagements (internal and external), in support of the sound security posture to fulfil the line management function pertaining to development and performance of the team.

Qualifications

• Bachelor's degree (NQF 7) in Information Systems and Management or an equivalent qualification
• Certification in Application Security Engineer (SACE)
• Certified Ethical Hacker (CEH)
• 8–10 years' experience in the secure SDLC frameworks and solutions, of which at least 5 years must be exposure to overall security governance best practices frameworks and design, penetration testing, integration and applications' code reviews.