Information Security Analyst at Clicks Group

Information Security Analyst

We are on the hunt for a talented Intermediate Developer to join our team you, will need to have a good understanding of Security Principle's and be extremely passionate about growing in the Security space. This role is based in our Cape Town head office.

Basic skills and qualifications:

• Be strong in at least one programming or scripting language (Linux shell scripting, Windows Powershell scripting, Python, Perl, Java, etc.)
• 4 years demonstrable general IT experience with at least two years thereof in development
• Relevant degree, certification in IT and MCSE and or working toward (CISSP, OSCP, CEH, Security+, Linux certification.

Job Objectives:

To take ownership of IT security duties and provide day-to-day support to the Information Security Officer, including:

• Administer and maintain operational security solutions and processes towards continuous improvement of the overall IT security posture
• Automate repetitive workflows with scripts and toolsets
• Research, develop, and recommend information security policies, procedures, standards, and safeguards to protect sensitive data and enable secure data transmission and storage
• Document and implement security hardening baselines for internal and external IT systems and compliance monitoring
• Administer and manage identity access governance toolset, and initiate and follow up on user access certification review campaigns
• Monitor SIEM alerts, investigate and resolve incidents / threat intelligence towards closure
• Collaborate with other teams to security solutions with backend applications and systems
• Identify, investigate and resolve threat intelligence, security, access and authentication issues escalated by staff and other users
• Keep abreast of and share details of new and on-going information security issues, threats, remediation/mitigation steps and latest technologies
• Document technical issues identified during security assessments and practical recommendations for resolution. Proactively identify and mitigate against information security risks or incidents
• Drive awareness of vendors / 3rd parties compliance requirements to information security standards, and ensure adherence thereof
• Generate regular IT security reports structured to provide information about statistics and trends as required by the Information Security Officer
• Implement IT security projects, deploy new security tools using DevOps approach to achieve tasks and objectives, and conduct research work as needed
• Maintain PCI DSS and audit compliance requirements
• Share workload with IT Security analysts to meet call SLA requirements, and automate manual IT security workflows where appropriate

Qualifications:

• Relevant degree, certification and MCSE, or IT studies (CISSP, OSCP, CEH, Security+, Linux)
• Demonstrable Linux and scripting/programming experience

Skills, Abilities and Job Related Knowledge:

• 4 years demonstrable general IT experience with at least 2 years thereof in development
• Basic understanding of information security principles
• Working knowledge of heterogeneous operating system platforms
• Proficient in at least one programming or scripting language (Linux shell scripting, Windows Powershell scripting, Python, Perl, Java, etc.)

Competencies:

• Analysing
• Planning and Organising
• Delivering Results and Meeting Customer Expectations
• Deciding and Initiating Action
• Learning and Researching