Senior Information Security Architect & Risk Leader

JSE Limited; Sandton; Presencial; ZAR 900 000 - 1 200 000; Tempo integral

Resumo da oferta

The Johannesburg Stock Exchange (JSE) is seeking a Senior Information Security Specialist to drive assurance across the technology landscape, ensuring confidentiality, integrity and availability of critical systems and data.

You will design, implement, monitor, and evolve security controls across on‑premises and cloud environments while ensuring compliance with industry standards and regulatory requirements.

Qualificações

• Degree in Information Systems, Information Security, Computer Science, or related field.
• Professional certifications (CISSP/CISM/CISA/CRISC or similar) are highly desirable.
• Minimum 10 years' IT experience and 7+ years in an Information Security Specialist role.

Responsabilidades

• Identify, assess, report on, and mitigate security risks across applications, infrastructure, and cloud environments.
• Conduct security risk assessments, audits, vulnerability assessments, and penetration testing activities.
• Drive remediation of vulnerabilities and support incident investigations and forensics.
• Develop security metrics and reporting frameworks for senior management.
• Provide security input into enterprise architecture and SDLC, and review designs for appropriate controls.
• Ensure alignment with regulatory frameworks (POPIA, SWIFT, NIST, ISO, OWASP, CIS, CSA).

Conhecimentos

Security governance

Risk assessment

Penetration testing

Incident response

Security architecture

Formação académica

Bachelor's degree in Information Systems / Information Security / Computer Science

Ferramentas

Nessus

Metasploit

Burp Suite

Kali Linux

Nmap

Descrição da oferta de emprego

The Johannesburg Stock Exchange (JSE) is seeking a Senior Information Security Specialist to drive assurance across the technology landscape, ensuring confidentiality, integrity and availability of critical systems and data.

You will design, implement, monitor, and evolve security controls across on‑premises and cloud environments while ensuring compliance with industry standards and regulatory requirements.