Security Analyst I (PCI) - Brackenfell at Shoprite Group of Companies

Job Objectives

PCI Compliance Management:

• Monitor, assess, and ensure adherence to PCI DSS requirements across all relevant systems and processes.
• Conduct regular audits and assessments to identify areas of non-compliance and implement corrective actions.
• Maintain documentation and evidence of compliance efforts for auditing purposes.

Risk Assessment and Mitigation:

• Identify potential security risks and vulnerabilities related to payment card data handling.
• Collaborate with cross-functional teams to develop and implement risk mitigation strategies.
• Conduct periodic risk assessments to proactively address emerging threats and vulnerabilities.

Security Controls Implementation:

• Implement and maintain security controls and measures to protect payment card data.
• Configure and monitor security tools and technologies to detect and prevent unauthorized access or breaches.
• Ensure encryption, access controls, and other security mechanisms are effectively deployed and enforced.

Incident Response and Management:

• Respond to security incidents and breaches related to payment card data promptly and effectively.
• Coordinate with internal teams and external stakeholders to contain and remediate security incidents.
• Conduct post-incident analysis and implement improvements to prevent recurrence.

Security Awareness and Training:

• Provide training and guidance to employees on PCI DSS requirements and best practices.
• Raise awareness about the importance of safeguarding payment card data and maintaining compliance.
• Foster a culture of security consciousness and accountability throughout the organization.

Qualifications

• Diploma / Degree in computer science, cybersecurity, or any related field.
• Recognised industry certifications in cybersecurity such as PCI Professional (PCIP), Certified Information Systems Security Professional (CISSP), or Certified Information Security Manager (CISM).

Experience

• +2 years of experience in cybersecurity, with solid experience across a variety of security products including firewalls, EDR, SIEM, WAF, IAM, PAM, DLP and encryption solutions.
• Hands on knowledge of Information Security standards, architecture, and models.
• Experience in Incident Response: including the ability to document security threats, resolve technical faults and allocate resources to deliver the applicable solutions.
• Solid understanding of security frameworks (NIST Cybersecurity Framework, ISO Standards and MITRE Framework) and risk management methodologies.
• Demonstrated experience in information security, with a focus on PCI compliance and payment card data protection.
• Strong understanding of PCI DSS requirements and their application in different organisational contexts.
• Proficiency in security tools and technologies for vulnerability assessment, intrusion detection, and incident response.
• Excellent communication and collaboration skills to work effectively with internal teams and external partners.