Digital Risk Analyst at The National Student Financial Aid Scheme

The Digital Risk Analyst has strong technical skills in a wide range of ICT domains and reports to the Senior Manager: Digital Risk as a member of the NSFAS GRC Team. This position will be required to perform second-line control and risk functions related to Information Security, Cyber Security and Digital Forensics in the areas of Information Security Governance; Human Resource Security; Physical and Environmental Security; Supplier Relationships; Information Security Incident Management; Operations Security and Communications Security.

• Assist the NSFAS Senior Manager: Digital Risk by,  
• Providing technical information, cyber and digital forensics support to other GRC units including Internal Audit, Forensics, Legal and Compliance.
• Implementation and performing of second-line information, cyber and forensics related controls.
• Fulfilling, logging, managing and escalating incidents, participating in problem and change management processes related to information, cyber and digital forensics risk.
• Deployment and management of Digital Risk solutions and systems including applications and infrastructure.
• Participate on NSFAS projects to ensure that information, cyber and forensics risk is factored into the evaluation, selection, design, deployment and maintenance of systems.
• Reporting on the status of controls, incidents, projects and compliance.
• Researching, assessing and recommending systems and configuration standards and requirements for securing NSFAS systems.
• Internal and external security related audits, digital forensic recovery and investigation threat modelling, penetration testing, security scanning and testing configuration baselines.
• Implementation and successfully completing second-line controls tests.     
• Following approved processes in fulfilling and tracking of GRC requests, incidents, updates, resolution and reporting.      
• Provide accurate and on time input to management reports on agreed metrics, evidence as required and advise or report on recommended actions.     
• Ensure that Digital Risk infrastructure and systems are available, configured, capacitated and managed as required.        
• Providing input and evidence as required and advise or report on recommend actions aligned to OEM recommendations, industry standards and frameworks and internal policy.
• Reading, interpreting and applying technical data manuals and related documents.
• Keep abreast of emerging security technologies, software and methodologies.
• Researching and providing technical and budgetary information for proposed digital risk solutions and providing input for RFQ's and RFP's.
• Share system and industry knowledge with NSFAS staff, capacitate team members in order for them to operate in a relevant and effective manner.     
• Effective time management, prioritizing requests, organize, schedule and co-ordinate tasks and projects.

Desired Skills and Requirements

• NQF Level 7 Qualification preferably Bachelors Degree in Information Technology or related
• Minimum 7 years experience in ICT or Information Security
• Strong technical background in multiple ICT Domains (preferred Digital Forensics, Security and Compliance, Cyber Security)
• Relevant ICT Certifications
• Drivers Licence with own transport
• Strong MS Office skills
• Working after hours as required
• Good written and verbal communications skills (English)
• Strong problem solving skills and attention to detail
• Strong investigation, report writing and research abilities