Consultant Information System Security (Assurance) at SITA SOC (Ltd)

Key Responsibility Areas 

• Audit security in an IT infrastructure to ensure the proper configuration of Linux/Unix, Windows and Oracle server security 
• Audit the Linux/Unix, Windows and Oracle system configuration as per audit standards to ensure the secure system is in place in the enterprise 
• Consult, conduct and develop Business Continuity Plan (BCP) and Disaster Recovery Plan (DRP) 
• Conduct Business Continuity simulated tests and information security assurance services
• Design and implement security standards and procedures in systems and security policies and guidelines for all system security processes 
• Secures assets in the information system by defining and addressing possible and real security problems 
• Conduct, monitor and maintain threat and vulnerability assessments on a regular basis to minimize associated risk and improve the security capabilities within operational implementation, such as ICT infrastructure linked to SITA managed networks 
• Compile reports and recommend corrective action for identified security weaknesses or incidents 
• Manage implementation of information security awareness and training programmes for employees and clients 
• Coordinate ongoing activities related to the development, implementation, and maintenance of information security controls and services aligned to the cyber security framework, policies, standards and procedures.  

Qualifications and Experience 

• Minimum: 3 year National Higher Diploma / National Degree in Computer Science or Information Technology or Network Management or a relevant discipline NQF level 7 qualification. Certified information system security Professional (CISSP) or Certified Information Security Management (CISM). Professional IT security management certification e.g CISSP ITIL Foundation, CoBit Foundation or CISM, GIAC, CCNP, ISACA CRISC CCSP: Certified Cloud Security Professional Advanced certifications such as SANS GIAC/GCIA/GCIH, CISSP or CASP and/or SIEM specific training and certification will be an advantage. 
• Experience : 6 - 7 years ICT Infrastructure or application development experience including IT Security working experience.