Security Specialist at Old Mutual

Job Description

Reporting to the Senior Manager Cyber Security for Old Mutual Insure, will be responsible for security operations, including asset & application security, vulnerability management, security testing and endpoint security. The role holder will be assist the security team to ensure the organization has the right security and monitoring strategies in place to detect attacks and quickly respond and contain any business or customer impact. The role holder will collaborate with the Senior Security Specialist for the scoping of requirements, incident response and adherence to any necessary protocols, regulatory or legal cyber security requirements.

Security Operations, Vulnerability Management, Security Testing & Endpoint Security.

• Assist Management with strategic collection of sources of cyber threat intelligence, analysis and threat management thereof
• Conducting situational awareness based on intelligence and threat information, and formulating and reporting an operational view of the external environment
• Cybersecurity Incident Response Process (CSIRP) and Team (CSIRT), and security incidents (detection, analysis, response, and recovery)
• Assist Management with the Threat & Vulnerability Management (and remediation) program discover problem areas on networks, and participate in remediating known issues within expected timelines
• Endpoint protection, detection, response and recover for assets
• Assist Management with the Information security program and plan: define, implement, and enforce information security policies
• Cybersecurity risk management: assist Management in driving the information security risk management strategy, process, and program (risk management, evaluation & detection)
• Cybersecurity compliance: ensure that controls are adequate to meet security requirements

Information Asset & Application Security

• Continuously maintain inventories of software and application assets
• Assist Management to Define, implement, assess, and maintain controls necessary to protect software and applications in accordance with security requirements
• Manage configurations and changes for software and applications
• Designate, prioritize, and categorize information and critical assets (Crown Jewels)
• Define, implement, assess, and maintain controls necessary to protect information and critical assets in accordance with security requirements

Job Requirements : Skills, Experience and Qualification

• An IT technical qualification or degree
• Knowledge of Information Security and IT Risk
• Recognized professional industry certification(s) such as Security Operations (SOC) Analyst, CompTIA A+, ISO/IEC 27001 Information Security, CEH
• 3 - 5 years of relevant industry experience within the financial services sector in an IT Security role
• Knowledge of Information Security Standards and Frameworks such as NIST CSF, ISO27001/2
• Knowledge of Secure Software Development Lifecycles and agile ways of work
• Knowledge of Vulnerability Management
• Knowledge of Security Awareness and Training
• Knowledge of Cloud Computing Platforms such as AWS, Azure
• Knowledge of Microsoft security and compliance

Skills

Education

Closing Date

18 October 2022