Senior Specialist: IT Security Compliance Officer at AfroCentric Group

Job description

Key Role

The IT Security Specialist will be part of Infrastructure Security team. The Specialist will be responsible for Technical Security Assurance and oversight of administration of systems and networks supporting trusted operating systems and multi-level security network hardware involving various platforms. He/she will provide security support for new developments and enhancements to existing system and network solutions leading to the development of proof of concept and/or system. This person will also participate in technical exchanges, in-progress reviews and related technical security operations, and acquisition meetings and forums. Design and document Technical Security controls at an operational level to ensure adequate protection of security activities. This individual needs to also be able to generate Technical Security Reports that will include but is not limited to Threat and Vulnerability Management and Penetration Testing

Core Tasks:

• Define technical IT security plans and documentation to support such plans
• Manage the implementation of the company’s Enterprise Information Security strategy, acting as technical lead in key IT and Security programs, projects and initiatives
• Review, provide input and approve solutions designs from an IT Security risk management perspective
• Coordinate penetration tests, as well as drive remediation of vulnerabilities and audit findings
• Conduct information security technical training and awareness
• Monitor compliance through various means including statistical sampling
• Provides regulatory compliance reports to management
• Drive corrective actions for compliance to security standards within the organisations delivery units
• Implement practical solutions that use the specialist and departmental systems and processes
• Provide specialist input and recommendations to improve the efficiency, compliance and quality objectives related to the area of specialisation
• Identify problems and develop and propose solutions to present to appropriate leader or stakeholders
• Ensure day to day operational support required from area of specialisation is provided to enhance performance

The ideal candidate will have:

• Matric
• CISSP, SSCP, CSA+, CASP, CEH, OSCP
• 3 – 5 years Technical Security part experience
• Minimum experience in: Open Source Applications – Safeguards information system assets by identifying and solving potential and actual security problems
• Linux Operating Systems
• Microsoft Technologies
• Compiled and Interpreted Development Languages
• Network Implementation (Operational & Security)
• Telephony Technologies (Analog & IP)
• Social Engineering
• Security Industry Standards
• Dispute Resolution
• Safeguards information system assets by identifying and solving potential and actual security problems
• Linux, Microsoft, Cisco certifications, Vendor Certifications such as Symantec, McAfee, Proxy Gateways (will be advantageous)

Please note that if you have not heard from us in 2 weeks, accept your application as unsuccessful.