Information Security and Infrastructure Specialist at DirectAxis

Job description

Overall purpose of the job

The Information Security and Infrastructure Specialist is responsible for the governance of all aspects of the physical and logical security of Direct Axis information assets and ensure confidentiality, integrity, security and availability of the information technology environment as well as manage the implementation, maintenance and support of the various technologies used within the Organization through the server and storage teams in accordance with best practices.

Goals/ Main outputs and Responsibilities for this position

Managing Operational Security BAU tasks such as, but not limited to:

• Monitoring privileged user access
• Vulnerability Management
• Patch Management
• Write, manage and update departmental documentation
• Report vulnerabilities in a timely manner and follow up their resolutions with the relevant owner
• Identify security vulnerabilities including people and procedural issues as well as system, physical and logical opportunities for improvement.
• Managing Operational projects:
• Track delivery on IT security gaps
• Manage various Infrastructure projects
• Manage various InfoSec projects
• Capacity management of infrastructure
• Drive various teams to complete relevant BAU operational tasks
• Ensure that all tasks referenced, are completed in alignment with Information Security policies
• Identify gaps in the IT infrastructure
• Work with Service providers around Infrastructure and operations remediation
• Accountable for working with Service Providers for root cause Analysis on Severity 1 and 2 Incidents
• Provide Architectural guidance to relevant teams based on best practise

Education (formal qualification required)

Minimum:

• Degree, Diploma, or comparable experience

   

• ITIL v3 (ideal)

  CISSP (ideal)

Experience (minimum experience required)

• 5 years experience working in Financial Services

• 8 years experience in an ICT technical support or operations environment

• 5 years experience in managing an Infrastructure environment, VMware, SAN Storage, and networking

• 3 years experience in capacity management

• 1 -2 years basic project management experience

• 3years familiarity with the basic principles of information security and their application in a commercial environment.

• 3 years knowledge of vulnerability analysis, patching and remediation strategies

• 3 years understanding of network architecture, protocols and principles

• 3 years understanding of Firewall and Web Application Firewall technology

• 3 years understanding of Anti-Malware technology

Competencies (skills and behavioural attributes)

Skill:

• Interpersonal

• Communication

• Prioritising

• Good influencing and negotiating skills, with the ability to champion and drive change

• Analysis and Reporting

Behavioural Attributes:

• Attention to detail

• Customer Focussed

• Strong time management

• Deadline driven

"In line with our employment equity plan, suitably qualified African Black candidates who meet the criteria for the role will be given preference"