Senior Manager : Information Systems Audit (Cybersecurity)

Mindworx Consulting and Academy; Johannesburg; On-site; ZAR 60,000 - 90,000; Full time

Job summary

Une entreprise de conseil dynamique recherche un expert en cybersécurité pour diriger les audits et les analyses dans infrastructures variées. Le candidat idéal doit avoir au moins 6 ans d'expérience, ainsi que des certifications complexes en cybersécurité. Le rôle exige une vision stratégique tout en offrant des recommandations pratiques basées sur des normes reconnues. Rejoignez une équipe dédiée à l'amélioration continue de la sécurité des données.

Qualifications

• Expérience minimale de 6 ans après la qualification, dont 4 ans en tant que manager.
• Certifications en sécurité, telles que OSCP ou ECIH souhaitées.
• Compréhension des audits de cybersécurité et des infrastructures réseau.

Responsibilities

• Gérer les audits de cybersécurité et de sécurité réseau.
• Conduire des évaluations de maturité en cybersécurité.
• Analyses post-incident et réponses aux cyberattaques.

Skills

Cybersécurité

Audit informatique

Gestion de l'incident

Pénétration

Education

NQF Level 8 - Bachelor’s Degree / National Diploma + Postgraduate Diploma

Certified Information Systems Auditor (CISA)

Job description

• This position requires a minimum qualification of National Qualifications
• Framework (NQF) Level 8 (i.e. 4-year Bachelor’s Degree / National Diploma + Postgraduate Diploma), e.g. B Com with specialisation in Auditing and / or Information Technology
• Certified Information Systems Auditor (CISA) or equivalent (e.g., a recognised IT auditing certification)

At least one of the following :

• Offensive Security Certified Professional (OSCP) or equivalent (e.g., CEH)
• Certified Incident Handler (ECIH / GCIH) or equivalent (e.g., CRIA)

Experience :

• Minimum of 6 years’ experience post qualification with at least 4 years’ experience operating at a manager / middle management level
• Extensive experience in managing cybersecurity and network security audits, with a strong understanding of networked environments that support various application hosting infrastructures, including Windows-based operating systems, as well as MSSQL and Oracle databases
• Extensive experience in conducting cybersecurity maturity assessments, particularly within the Southern African context. This includes a strong ability to position insights and control recommendations for clients, guided by leading frameworks such as NIST CSF, ISO / 2, CIS, and COBIT

System Analysis :

• Deep understanding of Penetration testing (pen-testing) methodologies (e.g., MITRE ATT&CK) and ethical hacking principles
• Deep understanding of a cyberattack incident response, incident response frameworks (NIST -61, SANS PICERL), and forensic analysis (post-incident investigation)