Senior Specialist: EUC Information System Security Operations REF NR : VAC00993/25 at SITA SOC (Ltd)

Key Responsibility Areas 

• Perform ongoing monitoring of information systems and assess threats and risks to information security; 
• Coordinate security awareness and training programs to increase employees ' overall understanding, reaction time and the ability to envisage the company's potential safety and compliance requirements 
• Perform compliance assessments and vulnerability assessments to ensure government and citizen information is secure 
• Attend to all logged security incidents 
• Collaborate and partner with internal business representatives to recommend appropriate products so that the solutions are developed with relevant security system design specifications 
• Execute activities related to the implementation, and maintenance of information security controls and services aligned to the cyber security framework, policies, standards and procedures 
• Management and Administration.  

Qualifications and Experience 

• Required Qualification: 3-year National Diploma / Degree in Computer Science or Information Technology or a relevant discipline verified / certified NQF level 6 qualification. 
• Certifications: Security + or Microsoft Security Certifications. 
• Added Advantage: ITIL foundation and COBIT 5 Introduction; Certified information system security professional (CISSP) or Certified; Information Security Management (CISM). 
• Experience: 6-7 years Information and Communication Technology (ICT) Infrastructure or Information Security (IS) or application life cycle management which should include the following: Working knowledge of information technology security risk management; Exposure to enterprise architecture frameworks (e.g. TOGAF; GWEA; MIOS).
• Knowledge of governance processes and standards (e.g. ISO 27001/27002; COBIT; ITIL); Exposure to information system security technical standards (e.g.: SSL certificates, anti-virus protection, etc.);
• Experienced in (e.g. Service Management, Converge Communication, Risk Management, Information Technology, Applications, etc.).