SECURITY ENGINEER : ANALYSIS AND SUPPORT (SOC) ICT SECURITY OFFICE

Financial Sector Conduct Authority; Pretoria; On-site; ZAR 400 000 - 500 000; Full time

Job summary

A regulatory body for financial services is seeking an ICT Security Engineer to safeguard its information and cyber security. The successful candidate will manage the Security Operations Centre, coordinate incident responses, and implement a cybersecurity awareness program. Candidates must have strong communication skills and the ability to work under pressure. Commitment to diversity and inclusion is emphasized, and people with disabilities are encouraged to apply.

Qualifications

• Candidate must demonstrate good communication and interpersonal skills.
• Energetic and able to learn quickly.
• Must be able to work independently and under pressure.

Responsibilities

• Monitor cybersecurity operations center and respond to incidents.
• Coordinate cybersecurity incident response and maintain plans.
• Manage performance of the Security Operations Center solutions.
• Prepare monthly operational security and intelligence reports.

Skills

Good verbal and written communication skills

Interpersonal skills

Ability to learn new concepts fast

Ability to work independently

Ability to work under pressure

Job description

Purpose of the Job

The ICT Security Engineer : Analysis and Support, will play a critical role in safeguarding the organisation's information and cyber security posture. This position is primarily responsible for the Security Operations Centre (SOC) and support, cyber threat analysis and investigative activities to manage the security events and incidents. This role will also be responsible for the training programme to encourage a culture of cyber security awareness, compliance to policies, standards procedures and regulatory requirements. The successful candidate will collaborate with cross-functional teams and stakeholders for security project initiatives and to facilitate mitigation plans across the organisation. The person appointed to this role will report to the Departmental Head : ICT Security and Risk.

Key Performance Areas

• Monitor the cyber security operations center and respond to the security incident response actions.
• Coordinate the cyber security incident response (CSIRT), periodically update the cyber security incident response plan (CSIRP) and Crisis Management Plan (CMP) as required.
• Coordinate the periodic security penetration testing and security vulnerability remediation activities.
• Manage and maintain optimal performance of the Security Operations Center solutions (log collector agents, SIEM, XDR and Vulnerability Management)
• Define and develop the annual cyber security awareness programme, calendar and publish awareness content to the organisation.
• Perform a review of ICT security policies, standards and procedures as required and in line with industry frameworks (NIST CSF, ISO27001, COBIT).
• Coordinate information technology general control (ITGC) requests for governance, assurance, business resilience audit and control assessments.
• Collaborate with cross-functional teams to ensure security-by-design for project initiatives.
• Prepare monthly operational ICT security and cyber threat intelligence reports.

Other Key Competencies

The candidate must demonstrate the following skills and attributes : Good verbal and written communication skills, interpersonal skills, and must collaborate effectively with other team members. The candidate must be energetic, have the ability to learn new concepts fast, work independently and under pressure when it is required.

FSCA is committed to increasing the representation of marginalized groups in line with its Employment Equity Plan. People with disabilities are encouraged to apply.

Please note that correspondence and communication will only be conducted with shortlisted candidates and that the FSCA reserves the right not to appoint if a suitable candidate is not identified.