Senior Specialist: Cyber Security at Old Mutual

Job Description

• Old Mutual Insure is looking for a passionate Senior Specialist: Cyber Security. Responsibilities will include security by design, including asset & application security, vulnerability management, security testing, and Email security. You will be assisting the security team to ensure the organization has oversight on security risks and monitoring strategies in place to prevent, detect and quickly respond to attacks, and contain any business or customer impact. The role holder will collaborate with the Senior Security Architect and End point Security team for the scoping of requirements, incident response, and adherence to any necessary protocols, regulatory, or legal cyber security requirements.

You would

• Analyze security architecture for projects globally in alignment with the OML/OMI polices and standards as well as develop privacy design architecture for Old Mutual Insure.
• Advise on solutions that balance business requirements with information security requirements.
• Identify security design gaps in existing and proposed architectures and recommend changes or enhancements across Old Mutual Insure.
• Identify and communicate current and emerging security threats.
• Assist Management with strategic collection of sources of cyber threat intelligence, analysis and threat management thereof
• Conducting situational awareness based on intelligence and threat information, and formulating and reporting an operational view of the external environment
• Conduct in-depth information security reviews and assessments of new and/or existing systems, applications and/or programs and design solutions or recommendations for the remediation or mitigation of risks or insecure design.
• Review, provide input, and approve solution designs from an information security perspective.
• Manage the information security products and support vendors.
• Provide insight as the information security subject matter expert in compliance projects.
• Assist Management with the Information security program and plan: define, implement, and enforce information security policies
• Cybersecurity compliance: ensure that controls are adequate to meet security requirements.
• Continuously maintain inventories of software and application assets
• Assist Management to Define, implement, assess, and maintain controls necessary to protect software and applications in accordance with security requirements
• Manage configurations and changes for software and applications
• Designate, priorities, and categorize information and critical assets (Crown Jewels)

Experience, knowledge & skills required: 

• 5 - 8 years relevant industry experience within the financial services/insurance sector in Cyber Security.
• Degree/Honors in Information Systems or Information Technology (Essential)
• Knowledge of Information Security and IT Risk
• Recognized professional industry certification(s) such as CISSP, ISO/IEC 27001 Information Security, CEH, CISM, CRISC, CDPSE, CCSP, CSSLP.
• Knowledge of Information Security Standards and Frameworks such as NIST CSF, ISO27001/2
• Knowledge of Secure Software Development Lifecycles and agile ways of working
• Knowledge of Vulnerability Management
• Knowledge of email security: in technologies like Mimecast, Sendmarc, MDO
• Knowledge of Data Loss Prevention (DLP) e.g. Varonis
• Knowledge of Cloud Computing Platforms such as AWS