ICT Security Administrator at The South African Weather Service (SAWS)

Job summary: 

• The ICT Security Administrator is responsible for the administration, monitoring, implementation, and operational support of cybersecurity controls, technologies, and processes across the South African Weather Service.
• The role supports the Information Security Specialist in protecting the confidentiality, integrity, and availability of information assets through security operations, vulnerability management, identity and access management, incident response, compliance monitoring, cyber resilience activities, and cybersecurity awareness initiatives.
• The role further supports regulatory compliance, audit requirements, security reporting, and continuous improvement of the organisation's cybersecurity posture. 

Key Performance Areas: 

Strategy and Policy Compliance 

• Support the implementation and execution of the ICT Security Strategy. 
• Monitor compliance with POPIA, the Cybercrimes Act, ISO 27001, King IV, and applicable government regulations. 
• Assist with the review, maintenance, communication, and implementation of information security policies, standards, procedures, and guidelines. 
• Support internal and external audit activities by providing required information, documentation, and audit evidence. 
• Maintain cybersecurity risk, compliance, and audit registers. 
• Track audit findings, corrective actions, and remediation activities to closure. 
• Support cybersecurity risk assessments and monitor mitigation actions. 

Security Operations and Threat Management 

• Administer and monitor cybersecurity technologies, including firewalls, endpoint protection, anti-malware solutions, intrusion detection and prevention systems, secure email gateways, SIEM platforms, and cloud security tools. 
• Monitor and analyse security alerts, logs, and events generated by security systems. 
• Investigate suspicious activities and security events in accordance with approved procedures. 

Identity and Access Management 

• Administer Active Directory, Microsoft Entra ID, and related identity management platforms. 
• Provision, modify, suspend, and revoke user access based on approved requests. 
• Perform user onboarding, transfer, and termination activities in accordance with approved procedures. 
• Manage and maintain privileged user accounts and access records. 
• Administer Multi-Factor Authentication (MFA) and Conditional Access policies 

Vulnerability and Security Configuration Management 

• Conduct approved vulnerability scans on servers, endpoints, network devices, cloud services, and applications. 
• Monitor, record, and track identified vulnerabilities and remediation actions. 
• Support vulnerability assessments and remediation activities across ICT environments. 

Business Continuity and Cyber Resilience 

• Support Disaster Recovery and cyber resilience initiatives. 
• Support periodic reviews of cyber recovery readiness and recovery capabilities. 
• Participate in Disaster Recovery planning and testing activities. 
• Execute approved cyber recovery and disaster recovery procedures when required. 
• Monitor and review backup security controls and backup protection measures 

Security Awareness and Training 

• Support the implementation of cybersecurity awareness programmes and campaigns. 
• Coordinate and facilitate user awareness initiatives and awareness events. 

Cybersecurity Reporting 

• Produce monthly operational cybersecurity reports and dashboards. 
• Compile and maintain cybersecurity performance statistics and metrics. 
• Report on security incidents, vulnerabilities, patch compliance, access reviews, awareness activities, and remediation progress. 
• Maintain cybersecurity records, evidence repositories, and reporting databases. 
• Monitor and report cybersecurity operational trends and recurring issues. 

Required minimum education / training: 

• National Diploma in information technology, Computer Science, Cybersecurity, Information Systems or related field, Degree will be an added advantage. 
• Cybersecurity certifications (often advantageous or required), such as: 
• Microsoft SC-200 Security Operations Analyst 
• Microsoft SC-300 Identity and Access Administrator 
• CompTIA CySA+ 
• Certified Ethical Hacker (CEH) 
• Fortinet NSE/FortiGate Certification 

Required Minimum work experience: 

• Minimum 3 years' experience in ICT infrastructure, ICT operations, cybersecurity, systems administration or network administration. 

Closing Date: 09 September 2026