Cyber Security Governance Researcher at Council for Scientific and Industrial Research (CSIR)

About the job:

The CSIR has a vacancy for a Cyber Security Governance Researcher in the Information and Cyber Security Centre within the Defence and Security Cluster. The incumbent will be responsible to develop and implement effective governance programmes for various clients. This position is based in Pretoria.

Key responsibilities:

• Implement information/cyber security risk management frameworks and legal and compliance practices;
• Develop security standards, processes, and guidelines based on best practices and industry standards;
• Develop information security incident management capabilities;
• Demonstrate, apply and/or implement an information/cyber security risk management program for Information Technology (IT) and Operational Technology (OT) systems for diverse a clientele in different domains;
• Develop and implement cyber security awareness programmes towards fostering a culture of cyber security awareness;
• Conduct research and development across the information and cyber security domains;
• Lead and manage technical projects;
• Compile research findings, reports, and other documentation, for delivery to clients and for internal use;
• Engage and collaborate with internal and external stakeholders to deliver multiple projects and solve multiple information and cyber security challenges (e.g., network security assessments, identify vulnerabilities and risks, provide recommendations, etc.);
• Prepare, review, and publish reports, cybersecurity advisories and peer-reviewed articles in local and international forums;
• Coach and mentor young cybersecurity specialists.

Qualifications, skills and experience:

• An Honours degree in information technology or computer science or computer engineering with at least four years’ experience in information and security domains with at least two of the four years’ experience must be in information security governance;
• A Master’s degree in information technology or computer science or computer engineering would be advantageous;

The following Cyber Security certifications and/or similar will be advantageous:

• Certified Information Systems Security Professional (CISSP),
• Certified Information Systems Auditor (CISA)
• Certified Information Security Manager (CISM)
• Knowledge of different cyber security frameworks such as National Institute of Standards and Technology (NIST) and/or ISO27001;
• Understanding of research and development processes;
• Good verbal and written communication;
• Oriented to customer service orientation and attention to detail;

Must be able to:

• Work across diverse information and cyber security domains;
• Solve challenging and complex technical security problems;
• Innovate and create new solutions for current cyber security problems;
• Plan, prioritise & time management;
• Work independently in a team context;
• Take ownership of own career and development;
• Stay current in own field;
• Work well under pressure, decision-oriented and meet deadlines;
• Mentor and coach team members;
• Willingness to acquire new skills.