Manager: Security and Network Monitoring (2746) at The South African National Roads Agency (SANRAL)

MINIMUM REQUIREMENTS:

• NQF Level 7 Bachelor’s degree, Advanced Diploma or equivalent in Information Technology
• Industry certifications: CISSP, CISM, or CISA, are compulsory
• 5 years min relevant experience
• 3 years min supervisory experience

KEY RESPONSIBILITIES:

Management:

• Effective management of the Security and Network monitoring team, ensuring the organization's security posture, and reporting on security operations to senior management.
• Manage ongoing information and cyber security threat monitoring and regularly analyse security risks through qualitative risk analysis to ensure compliance with security governance.
• Manage the team's day-to-day operations, developing and implementing security procedures, coordinating incident response efforts, and ensuring compliance with regulatory requirements.

Operational:

• Lead Investigation of security incidents, identify threats, and determine the root causes of vulnerabilities.
• Identify and analyse potential threats and vulnerabilities, proactively mitigating risks.
• Manage security incidents, ensuring the appropriate process is followed from start to finish.
• Familiar with fundamentals of attack frameworks such as Mitre, Lock Head kill-chain, etc.
• Responsible for selecting, implementing, and managing threat intelligence platforms, ensuring the team has the necessary tools to detect, analyze, and respond to security incidents.
• Set up and manage security monitoring and detection systems to identify suspicious activities and potential threats.
• Lead the process to continually identify, assess, report on, manage and remediate vulnerabilities across endpoints, workloads and systems.
• Oversee the collection, analysis, and response to security alerts and events to ensure the protection of an SANRAL's assets and information.
• Define security monitoring policies, procedures, and guidelines for monitoring and detecting security threats.
• Overseeing the deployment, configuration, and maintenance of security monitoring tools, such as security information and event management (SIEM).
• Continuously research and evaluate new security technologies, tools, and methodologies to enhance the organization's security posture.

Reporting:

• Provide regular updates on incident summaries, performance metrics, threat landscape insights, and compliance status to SANRAL’s leadership.
• Develop dashboards and visualizations to provide an overview of the function's performance and security posture, allowing for quick identification of areas of concern.