Cybersecurity & Risk Specialist (Coordinator Level) (CPT Onsite)

SUMMARY:
-

POSITION INFO:
ENVIRONMENT: A reputable Travel & Tourism Agency seeks the technical expertise of a Cybersecurity & Risk Specialist whose core focus will be to manage technology and Information Security risks while maintaining appropriate security controls. The role will coordinate day-to-day Cybersecurity, Information Security, compliance and technology risk activities, working closely with the Technology & Digital Transformation team and business stakeholders. The successful incumbent must possess a Degree\/Diploma in Information Security, Cybersecurity\/IT\/Computer Science or a related field (NQF 6–7) with 3-5 years' relevant experience in Cybersecurity, Information Security, technology risk, IT governance, compliance or a related environment. You will also require a practical understanding of Information Security, Risk Management and Governance& POPIA and information protection principles.   DUTIES: Cybersecurity, Risk & Governance - ·        Assist with identifying and assessing technology and information security risks. ·        Maintain risk registers, action plans and security documentation. ·        Support the implementation and review of security policies, procedures and controls. ·        Assist with POPIA and information security compliance activities. ·        Support security audits and follow up on remediation actions. ·        Prepare reports and updates on Cybersecurity risks and activities.   Security & Incident Support - ·        Assist with monitoring security alerts, vulnerabilities and security controls. ·        Support Microsoft 365 security activities, including MFA and Conditional Access. ·        Assist with Cybersecurity incident management and escalation. ·        Track vulnerability and security remediation activities.   Technology & Digital Projects - ·        Support technology projects by identifying security and risk considerations. ·        Assist with security assessments of new technologies, cloud and SaaS solutions. ·        Support the application of appropriate security controls within digital initiatives.   Third-Party Risk - ·        Assist with supplier and third-party security assessments. ·        Support the review and tracking of security requirements and risks relating to service providers.   Awareness & Resilience - ·        Support Cybersecurity awareness and cyber hygiene initiatives. ·        Assist with security training and phishing awareness activities. ·        Support business continuity and disaster recovery activities and testing. ·        Assist with tracking actions arising from security and continuity exercises.   REQUIREMENTS: Qualifications – ·        Degree or Diploma in Information Security, Cybersecurity, IT, Computer Science or a related field (NQF 6–7).   Experience\/Skills – ·        3–5 Years' relevant experience in Cybersecurity, Information Security, technology risk, IT governance, compliance or a related environment. ·        Practical understanding of Information Security, Risk Management and Governance. ·        Understanding of POPIA and information protection principles.   Advantageous - ·        Exposure to Microsoft 365 security, including MFA, Conditional Access or Defender. ·        Exposure to frameworks such as ISO 27001, NIST or CIS. ·        Exposure to vulnerability management, audits, third-party risk, business continuity or disaster recovery.   ATTRIBUTES: You are a proactive and dependable professional who: ·        Takes ownership and follows through. ·        Handles sensitive information with integrity and discretion. ·        Is organised and detail oriented. ·        Communicates clearly with technical and non-technical stakeholders. ·        Takes a practical, solutions-focused approach. ·        Can work independently while collaborating effectively with others. ·        Is comfortable working in a changing technology environment. ·        Demonstrates curiosity and a willingness to learn.