Specialist Information System Security at SITA SOC (Ltd)

Purpose of the job

• The job will be responsible to perform compliance and vulnerability assessments, execute activities related to the implementation, and maintenance of information security controls and services aligned to the cyber security framework and attend to all logged security incidents.

Key Responsibility Areas

• Perform ongoing monitoring of information systems and assess threats and risks to information security.
• Collaborate and partner with internal business representatives to recommend appropriate products so that the solutions are developed with relevant security system design specifications.
• Coordinate security awareness and training programs to increase employees ' overall understanding, reaction time and the ability to envisage the company's potential safety and compliance requirements.
• Perform compliance assessments and vulnerability assessments to ensure government and citizen information is secure.
• Attend to all logged security incidents.
• Execute activities related to the implementation, and maintenance of information security controls and services aligned to the cyber security framework, policies, standards and procedures.
• Facilitate, coordinate and update of Business Continuity, Disaster Recovery and Incident Response plans.

Qualifications and Experience

• Required Qualification: 3 years National Diploma in Computer Science or Information Technology or Network Management or a relevant discipline NQF level 6 qualification.
• Certificate: ITIL foundation and COBIT 5 Introduction will be an added advantage. Certified information system security professional (CISSP) or Certified Information Security Management (CISM) will be an added advantage.
• Experience: 3 to 5 years Information and Communication Technology (ICT) Infrastructure or Information Security (IS) or application life cycle management which should include the following. Working knowledge of information technology security risk management. Exposure to enterprise architecture frameworks (e.g., TOGAF GWEA MIOS) knowledge of governance processes and standards (e.g. ISO 27001/27002 COBIT ITIL). Exposure to information system security technical standards (e.g.: SSL certificates, anti-virus protection, etc.) Experienced in (e.g. Service Management, Converge Communication, Risk Management, Information Technology, Applications, etc).

Technical Competencies Description

• Working knowledge of information technology security risk management. Exposure to enterprise architecture frameworks (e.g., TOGAF GWEA MIOS) knowledge of governance processes and standards (e.g. ISO 27001/ 27002 COBIT ITIL). Exposure to information system security technical standards (e.g.: SSL certificates, anti-virus protection, etc.) Experienced in (e.g., Service Management, Converge Communication, Risk Management, Information Technology, Applications, etc).
• Technical competencies: Enterprise ICT Governance (Policies & Legislation); Information Management; Information Security and Application Protection; IT Project Management; IT Service Management; and IT Risk Management.
• Interpersonal/behavioural competencies: Active listening; Attention to Detail; Analytical thinking; Continuous Learning; Disciplined.

Deadline:23rd October,2026