Information Security Specialist (GRC) at Rand Merchant Bank

To ensure that the design and operations of IT security controls are in line with FRG policies, processes, standards and procedures. The incumbent will also ensure that proper and adequate IT technology and tools are in place to enforce these controls.

Information Security Specialist Job Requirements:

• Information Technology Degree 
• Minimum of of 7 years in IT, 4 of which as an Information Security Specialist in an enterprise environment essential
• Security certification e.g. CISSP & CISM essential
• Experience should ideally span multiple security domains ranging from security risk and governance, Data Loss Prevention, Authentication, Malware, Network Security, Applications and Operations Systems and Security across platform / database /network.
• Knowledge of current security risks and protocols
• Good analytic and problem-solving skills
• Ability to work under pressure, as well as the ability to take independent initiative when needed

Job Responsibilities

• Analysis of known and emerging threats to determine risks against RMB assets Creation, maintenance, governance and communication of security policies and standards across RMB Assurance that RMB assets are effectively managed and monitored to meet RMB security requirements
• Coordinate reporting and action plans in the event that a security breach does occur
• Ensure that monthly reviews are conducted and reports are presented to the relevant business units and governance committees.
• Represent Information Security in the relevant business areas in RMB as well as various IT Architecture and or Security committees and forums within RMB and First Rand Group.
• Support with the aligning to and the implementation of security strategy for the bank by ensuring that Information Security standards are not only understood but owned by management and employees and ensure that appropriate standards are established and complied with.
• Review and document Information Security Processes and Procedures and meet governance in terms of legislative and audit requirements and provide consultation to business with regard to this.
• Identification, management and of information security risks within RMB by assisting in identifying, defining and maintaining the information security policy and functional standards for FRB.
• Support with implementing control mechanisms, which enables Information Security function to have a view of the status of information security within the RirstRand Group
• Report on mitigating actions required to correct or remedy actions where necessary and inform CISO or Business Units of any significant changes and risk situations
• Consult to projects in terms of identifying risks, vulnerabilities and controls for new developments by researching and understanding security best practices and implementation of security products in a corporate environment.
• Perform Security Assessments on internal environments or external 3rd party environments, with the purpose of identifying shortcomings which introduce risk, and make recommendations for changes or improvements
• Manage own development to increase own competencies
• Maintain current knowledge of the Information Systems security industry's emerging technologies.