Information Security Specialist (24 Months Fixed-Term Contract)

About the position

Position is to plan, manage, and administer the company network security. Ensure all network components are managed in accordance with approved guidelines and processes to
ensure compliance
JOB DESCRIPTION

• Designing, installing, and managing security mechanisms that protect the company network and information systems against breaches, viruses, and anti-spyware.
• Upgrading systems by implementing and maintaining security controls.
• Protecting the system by defining access privileges, control structures, and resources.
• Developing and implementing standardised Information Security processes and procedures.
• Responding to internal and external audit findings timeously.
• Conducting IT risk assessments and group policy management.
• Assisting with Penetration testing and vulnerability assessments.
• Driving vulnerability management, security hardening, and remediation programmes or projects.
• Remediate cloud security findings, vulnerabilities, and penetration test results.
• Ensuring Endpoint protection (Antivirus Software) is always managed and configured properly.
• Ensuring Information System compliance and conformance to IT policies and processes.
• Ensuring that systems and procedures follow industry standards, e.g., ISO [Phone Number Removed];.
• Liaising with all departments and IT users to ensure compliance and correction of all IT security issues.
• Research, plan, and implement information security technical solutions to meet business requirements.
• Proactively monitor, investigate, and report on information security incidents, Internet use, and ICT policy breaches.
• Carry out assignments and tasks delegated by line and senior management in line with company’s operational requirements.

JOB REQUIREMENTS

• National Diploma in Information Technology or a relevant equivalent qualification at NQF level 6.
• A minimum of five (5) years’ experience in IT governance and security.
• Certifications in ITIL Foundation, Security+, CISM, CISSP, SCCM, and COBIT will be an added advantage.

SKILLS AND KNOWLEDGE BASE

• Knowledge of Patch management, antivirus, vulnerability management, and Intune management.
• Knowledge of penetration testing.
• Knowledge of Active Directory, Azure, and Cisco Meraki.
• Knowledge of Group Policy Management and Firewalls (Checkpoint, Sophos).
• Knowledge of Mimecast, Azure Active Directory, and Cloud Security.
• Knowledge of ManageEngine products (Desktop Central, Log 360, Ops Manager).
• Proficiency in TCP/IP/Routers/Switches/Firewalls.
• Server operating systems and security.
• Analytical and problem-solving skills.
• Project Management, presentation, and report writing.
• Customer-centricity, communication, interpersonal, and emotional Intelligence.

Desired Skills:

• Report writing
• Problem-solving skills
• Project Management