Vulnerability Management Specialist at Absa South Africa

Job Summary

• To provide specialist advice & support in the development & implementation of IT security service delivery processes, methods and techniques enabling secure management & control of IT access, in alignment with governance requirements.

Job Description

Process:

• Provide specialist advise and support to safeguard information systems and associated assets through the identification and management of security risks. 
• Identify, diagnose and recommend improvements and provide specialist advice and support to ensure that solutions are appropriate and effective. 
• Use practical knowledge and theoretical guidelines, to diagnose area of specialisation problems and generate workable solutions. 
• Perform security audits and clean-ups to ensure accurate and up to date access within the organisation. 
• Perform, advise and provide information on risk management impacts and mitigate risk in respect of system and application access. 
• Analyse IT related access report/s to identify discrepancies and anomalies and recommend remedial action. 
• Provide specialist advice and support in defining standard operating procedures (SOP's). 
• Conduct research and gather data to provide input to operational reporting and decision making processes. 
• Provide specialist advice to plan for value-added process improvements, initiatives and services to deliver on operational objectives. 
• Provide expertise to identify and develop solutions to improve quality of processes and services. 

Client/Customer: 

• Provide support and contribute to a culture of customer service excellence that meets and exceeds exceptional service. 
• Build relationship with customers that contribute to a culture of customer service excellence. 

Conduct: 

• Ensure that all activities and duties are carried out in full compliance with regulatory requirements, Enterprise Wide Risk Management Framework and internal Policies and Policy Standards 
• Finance: Contribute to the effective reduction of cost and financial wastage in line with organisational policies and procedures. 
• Learning and Growth: Participate in forums that positively contributes to knowledge improvement. Provide advice and support in the management of change and offer operational support where required.

Work Experience:

• Required: Experience in managing cyber vulnerabilities for an estate larger than 20,000-managed endpoint, 5+ Years.
• Required: Experience in the deployment and operationalization of enterprise-grade vulnerability management tools, such as Tenable or Qualys, 5+ Years.
• Required: Ability to analyse large data-sets and articulate the data into palatable reports for both technical and business audiences.
• Required: Experience in articulating reported vulnerabilities & technology-related matters in business language, and vice-versa.
• Required: Have a broad understanding of the core functionalities of different IT platforms, including operating systems, networking infrastructure and IoT.
• Nice-to-Have: Work-experience in the Financial Services Industry would be an advantage.

Education:
Degree: Not required
Accreditation:

• Certification on enterprise-grade vulnerability management tools.
• CISSP/SSCP/Security+, and related qualifications would be an advantage
   

Education

• Bachelor`s Degrees and Advanced Diplomas: Physical, Mathematical, Computer and Life Sciences (Required)