Specialist : IT Security

Tower Group South Africa (PTY) Ltd; Johannesburg; On-site; ZAR 600,000 - 800,000; Full time

Job summary

A leading cybersecurity firm in Johannesburg is seeking an experienced professional to manage Information Security risks and develop an effective Information Security Management framework. The ideal candidate will have a strong background in IT Security, risk management, and relevant qualifications, along with a minimum of 3 years' experience in the field. The firm offers a dynamic working environment focused on compliance and best practices.

Qualifications

• Minimum 3-year experience in IT Security.
• Understanding of IT Security discipline processes and best practices.
• Solid technical aptitude and knowledge in the ICT industry.

Responsibilities

• Responsible for identification, measurement, and control of cyber security risks.
• Develop and implement an Information Security Management framework.
• Ensure compliance with national legislation and international standards.
• Provide expert advice on risk management practices.

Skills

Risk Management

IT Security

Knowledge of PCI DSS

Problem Solving

Interacting with People

Education

Relevant 3-year Computer Science, Information Management, Engineering or Business Degree / Diploma (NQF level 6)

Grade 12 (NQF 4) with relevant IT Certification

Job description

Responsible for the identification, measurement, control and minimisation of loss associated with uncertain information and cyber security risks throughout the ICT and business environment.

The development, documentation, implementation and monitoring of an Information Security management framework including policies, standards, procedures, and security architecture to ensure delivery and awareness of sound Information Security Management practices company wide, including compliance with national legislation and international standards.

Researches and stays abreast of worldwide best practice and regulations. Provides expert advice and consultancy with respect to risk management practices and concerns within IT and business architectures, applications, changes, solutions and operational processes

Information Security Governance

• Create / Maintain / Communicate Information Security Policies and Standards.
• Ensure Regulatory and Security Policy Compliance and Business Risk alignment.
• Manage policy reviews, updates and approval process.
• Support Security Governance Forum and ISMS Processes
• Maintain Information Security Strategy and ensure business strategy alignment.

Information Security Assurance & Compliance

• Ensure Information Security related Operational and Service Level Agreements are established.
• Ensure Security Operations Assurance and Delivery.
• Ensure Security Operations compliance with policies, standards, and procedures including PCI DSS.
• Ensure provision and compliance of Security Operations Management and Security.

Operations Centre

• Responsible for ensuring effective Vulnerability Management, Patch Management and Information Security Incident Management.
• Information Security Risk Management.
• Report on enterprise Information Risk.
• Research, Identify and Assess Information threats to business.
• Project and Change Consultation and Assessment of Risk.
• Information Risk assessment, rating, management, and resolution.
• Represent Information Security in Governance and Business processes.
• Monitor, Assess and Report on Operational Security Assurance process.

Information Security Architecture

• Ensure Enterprise Security Architecture aligns with business requirements and risks
• Advise and recommend technical Security direction in support of Enterprise Security Architecture.
• Define, Assess and Communicate Information Security elements within Business and IT Architecture.
• Information Security input to Business Cases and Projects
• Ensure Information Security Architecture requirements are met within all systems and processes.

Information Security Awareness

• Ensure Information Security Awareness of Policy and Business Risks
• Contribute to developing and implementing Information Security Awareness Programs and measuring the effectives thereof.

Understanding the IT Security discipline processes, concepts and best practices; solid technical aptitude and knowledge; understanding of what is happening in the ICT industry in general.

Knowledge in Risk Management; IT Technologies; IT Security, PCI DSS compliance.

Directing People; Exploring Possibilities; Generating Ideas; Interacting with People; Making Decisions, Developing Expertise, Providing Insights, Producing Output, Upholding Standards. Problem Solving

Minimum 3-year in IT Security experience.

Certifications : Relevant certification will be beneficial.

Relevant 3-year Computer Science, Information Management, Engineering or Business Degree / Diploma (NQF level 6).

Alternatively, Grade 12 (NQF 4) with relevant IT Certification and / or equivalent years of experience

Driver's license