Information Security Officer

ROLE OVERVIEW

To lead the protection of the company Information and Communication Technology (ICT) environment against cyberattacks by defining security strategy, identifying, and remediating potential and actual security threats, vulnerabilities, and related security weaknesses.

QUALIFICATIONS AND EXPERIENCE

• A relevant Bachelor or NQF 7 Qualification in Information Technology.
• Must be Certified in any of the two Courses below:

• Ethical Hacking.
• ISACA CISA (Certified Information Security Administrator).
• ISACA CISM (Certified Information Security Manager).
• CISSP (Certified Information System Security Professional)
• ISO27001
• TOGA

• 5-7 years’ relevant working experience in ICT Security Management and Cybersecurity.
• Knowledge of Cyber security.
• Knowledge of industry best practice e.g., ITIL and COBIT, etc.
• Firewall Administration Experience.
• IT Security Operations.
• Solid knowledge of Information Security principles and practices.
• Intrusion detection and prevention systems.
• Knowledge of POPI Act.
• Installation, configuration, monitoring and response to security technologies.
• Understanding of advanced security protocols and standards.
• Software and security architecture(s).
• Knowledge of risk management principles.

KEY PORTFOLIO AND PERFORMANCE FOCUS AREAS

• Develop ICT Security Policies, Procedures and Standards and provide guidance consistent with the entity’s security requirements.
• Develop and implement Security reference architecture framework and related strategies.
• Conduct relevant research in Information Security Management and Technologies to keep abreast with security related trends including country’s security regulations.
• Coordinate and manage Information Security meetings and documentation and ensure issues are follow-up.
• Manage and Audit Reviews regarding Information Security.
• Manage seamless integration of functions with other sections and centers.
• Coordinate and manage external parties engaged in the provision of services related to Information Security.
• Establish a process for identifying, tracking, and reporting security incidents.
• Conduct reviews of all systems to ensure that effective IT security controls consistent with policies are in place for each system.
• Cooperate with the IT Management on IT security matters such as incidents, potential threats, and other concerns including regular reviews of logged security violations and related incidents.
• Maintain the IT Risk Register and Security Awareness and Compliance Training Programs to ensure that ICT staff, and Company employees are well informed of current and emerging security threats
• Conduct regular security assessment, vulnerability assessment including penetration testing.