Current Jobs at Road Accident Fund

Key Performance Areas

Create and Manage Documented Standards, Processes and Procedures

• Ensure compliance with ICT security standards, processes, and procedures for both systems and applications.
• Develop and update necessary documentation to support system and application security measures.
• Support regular reviews of these standards, processes, and procedures.
• Aid in the creation and upkeep of various documentation, including business recovery plans, technical standards and procedures.

Security Solutions Implementation and Maintenance

• Develop and implement security procedures, and standards to safeguard company assets and data.
• Manage and administer common security tools such as Data Loss Prevention (DLP), Antivirus software, and Cloud Security Tools like Cloud Access Security Broker (CASB).
• Conduct regular security assessments and audits to identify vulnerabilities and assess the effectiveness of existing security controls.
• Collaborate with IT teams to design and implement security measures for new systems and applications.
• Provide guidance and support to internal teams on security-related matters, including incident response and security awareness training.
• Stay abreast of industry trends, emerging threats, and best practices in cybersecurity to continuously improve RAF security posture.

Security Monitoring

• Monitors networks and analyses intrusions using various tools like Intrusion Detection/ Prevention Systems (IDS/ IPS), firewalls, and Host-Based Security System (HBSS).
• Identifies unauthorised usage trends by correlating network activity across different networks.
• Reviews alerts and sensor data, then compiles technical incident reports.
• Research emerging threats and vulnerabilities to aid in detecting network incidents.
• Offers incident response support to network subscribers, including implementing containment actions and facilitating forensics analysis as needed.
• Conducts pre-implementation testing on new computers, software, switch hardware, and routers to ensure security.
• Assists in developing business continuity/disaster recovery plans, conducts disaster recovery tests, publishes results, and implements necessary changes to address any deficiencies.

2nd Level Support on Cybersecurity Incidents

• Responds and resolves reported security incidents
• Responds to and, where appropriate, resolves or escalates reported security service requests
• Monitors system logs from the SIEM and other network traffic for unusual or suspicious activity. Interprets such activity and makes recommendations or escalate for resolution
• Collates security incident and event data to produce monthly exception and management reports.
• Investigates and resolves security violations by providing postmortem analysis to illuminate the issues and possible solutions

Implement Security Controls Across Applicable RAF Systems and Networks

• Verify all requests and changes are correctly authorised before implementation.
• Ensure that the implementation of controls follow the RAF change control procedure.
• Participate in identifying potential security violations, segregation of duties and risks prior to and post implementation of controls.
• Operate and administer ICT security control solutions to ensure that systems and applications are protected against security threats and vulnerabilities.
• Adhere to processes and procedures to ensure that security solutions under your control are always functioning correctly.

ICT Security Awareness

• Participate and assist with the development of Information Security awareness programs within the RAF.
• Participate and assist with awareness by appropriate means such as, employee briefings, intranet, newsletters, and road shows.
• Handle enquiries relating to ICT security and escalate where you are unable to assist.

Monitoring, Reviewing and Reporting on ICT Security

• Participate with all monitoring, reviewing and reporting activities for systems and applications under your control.
• Participate in defining and implementing processes and procedures to ensure monitoring, reviewing and reporting activities are performed as agreed.
• Provide quality and accurate inputs for reports as agreed.
• Participate in monitoring ICT systems and applications changes to security controls and applicable security breaches/incidents and compliance status.
• Provide inputs for periodic reports on systems and applications under your control.
• Provide recommendations for appropriate security control improvements, introduction of new security controls.

Auditable Record Keeping

• Participate and assist with defining and implementing processes and procedures to ensure that auditable records are kept for all security activities for which the teams are responsible.
• Participate and assist in maintaining all records.

Reporting

• Track and report against set objectives and targets.
• Report on emerging risks.
• Provide ad hoc reports on process improvement initiatives.

Stakeholder Management

• Maintain healthy relationships with all stakeholders.
• Follow up and resolve all queries, following up and making recommendations on which corrective actions are appropriate.
• Follow up and feedback to all stakeholders to keep them updated on the status of a query.
• Respond to queries within the predefined turnaround times.

Audit Recommendation Analysis and Implementation

• Participate and assist in defining and implementing processes and procedures to ensure that audit recommendations are:
• analysed before implementation thereof.
• are properly authorised and implemented within the time schedules agreed.
• Assist in implementing recommended changes as per audit
• Participate and assist in reporting the status of recommendation analysis and implementation regularly to management.

Qualifications and Experience

• Bachelor’s Degree/ Advanced Diploma in Information Technology related qualification.
• Certifications such as Security +, CISSP\ CEH\ Cybersecurity Practitioner Certification are advantageous.
• Relevant 4 years’ experience in an ICT Security related environment.
• Experience in developing, documenting and maintaining security procedures.

go to method of application »

Key Performance Areas

Compliance Administration

• Maintain up-to-date written documentation related to the departments business activities.
• Ensure compliance to the policies and process standards.
• Keep abreast of internal standards and business goals to ensure adherence to sound internal control.

Office Coordination

• Assist in making follow-ups on outstanding matters.
• Ensure all requests are handled and responded to within set timelines.
• Assist in ensuring the availability of stationery within the department.
• Validate and verify information and documents submitted for accurate capturing and further handling.
• Ensure the systems/registers used are kept up to date.
• Check for duplicate documents, requests and queries and report on them.
• Allocate reference numbers and accurately capture related documents on different systems.
• Allocation of matters to responsible team members.
• Draft and send out letters to all stakeholders as required.

Meeting Support

• Arranging meetings on behalf of the department.
• Assist with taking and distributing minutes in accordance to set governance standards.
• Create and maintain a register to track matters outstanding.
• Maintain a follow-up plan on meeting resolutions and matters outstanding.
• Ensure confirmation of meetings and management of team diaries.
• Schedule appointments with internal and external stakeholders as and when required.

Document and Records Management

• Administer the records management and filling processes in line with the RAF filling plan
• Ensure that the filing system is always up-to-date and functional.
• Retrieval of information at all times as requested in the office.
• Ensure confidentiality of all documents under control and that documentation reaches the intended recipients.
• Acknowledge the receipt of documentation, apply a file number allocation, record data onto the computer system and file appropriately.

Qualifications

• Matric or Grade 12 certificate.

Experience

• Relevant 1 years’ experience in Administrative or similar environment.