Assistant Director: ICT Security REF NO: Q9/2026/49 at Independent Police Investigative Directorate (IPID)

REQUIREMENTS :

• An NQF level 7 qualification in ICT as recognized by SAQA or related field. 3-5 years’ working experience in ICT security environment. Knowledge Requirements: Knowledge and understanding of government regulations / prescripts / policies. Knowledge and understanding of departmental policies relating to ICT.
• Knowledge of Firewall systems. Knowledge on network monitoring tools. Knowledge and understanding of DMZ Zone. Knowledge of ICT Security audit including server room compliance standards, Knowledge of Hacking/penetration test. Knowledge of different software systems and components. Knowledge of software and hardware configurations. Knowledge of desktops, server hardware and software.
• Ability to evaluate documentation. Knowledge of software application systems. Knowledge of back-up and recovery systems. Knowledge of disaster recovery testing and business continuity. Understanding of ICT network infrastructure and other related matters.
• Skills and Competencies: Excellent written and oral communication skills. Demonstrated customer service skills and focus. Proven ability to manage multiple tasks and projects. Ability to think and act tactically. Interpersonal skills. Project management skills. Troubleshooting skills. Presentation Skills. Skill to analyse and evaluate systems, data, etc. 

DUTIES :

• Coordinate ICT Security operations: Administer and monitor firewall activities, provide monthly and quarterly reports, Monitor ICT security compliance with departmental policies, procedures and prescripts, Monitor the Demilitarized Zone (DMZ) on the network and generate reports. Administer and monitor user activity on the network and reporting any violations.
• Protect data and system integrity: Conduct network penetration and detection/prevention tests and submit monthly reports. Conduct back-ups testing for integrity and restore purposes. Verify that all systems and equipment on the Disaster Recovery (DR) site are updated in line with the Disaster Recovery Plan (DRP). Verify that archiving of emails is properly conducted for both outgoing and incoming communications. Update software and hardware systems and equipment at the DR site.
• Conduct ICT security risk and Compliance: Identify and report on ICT security risks and threats and escalate complicated matters. Compile monthly and quarterly reports. Identify information assets (ICT Systems), potential threats and vulnerability. Evaluate ICT systems quarterly (software & hardware) and submit reports. Conduct market research and benchmarking on ICT security Technologies to improve services and submit reports. Document all ICT security –related changes on system/networks and implementation. Provide ICT security input for network upgrades, design and installations. Respond to security related queries and solve them.
• Implement systems and conduct Application Testing: Publish approved projects to the web application for processing and implementation. Test new software and applications before deployment to ensure compliance. Certify software and hardware before installation or implementation.
• Manage resources and Record-keeping: Conduct maintenance and awareness campaigns on ICT security matters. Update all ICT security equipment and software records in registers. Verify equipment and software for disposal to ensure compliance with policies and prescripts.