Job Openings at ATNS

Job description

Major Activities

• Develop the SecDevOps strategic plan to contribute to the overall IT strategic plan to enable achievement of the ATNS business strategy.
• Build upon the ICAO Aviation Cybersecurity Strategy to ensure safety, security and continuity of ATNS services in a world increasingly jeopardized by cybersecurity threats.
• Actively participate in the development of the National Aviation Cybersecurity Strategy that underpins the aviation industry mind shift and behavioral change to carry out the identified cybersecurity key concepts supported by the establishment of a cybersecurity culture and awareness developed through collaboration and industry partnership.
• Ensure alignment of the application portfolio to the business strategy and business operations requirements.
• Drive the adoption of best practices in software development, configuration and support that integrate principles of lean thinking, continuous improvement and agility, e.g. Test-driven Development, Continuous Integration.
• Lead the secure development and maintenance of ATNS digital platforms, supported by peers in infrastructure management, data and analytics, and information security, in line with the ATNS modernisation strategy.
• Establish together with South African Civil Aviation Authority an Information Sharing Group for governance and compliance consisting of all aviation ecosystem role players with a trust framework that can be leveraged by the RSA aviation community as a whole.
• Participate in appropriate ICAO regional and international cybersecurity and SADC forums that will advance ATNS cybersecurity position and objectives.
• Collaborate effectively with technology peers and colleagues across the organization.
• Lead application rationalisation informed by business value analysis of the application inventory
• Transform the application landscape through scalable applications and technology, enabling business efficiency and growth.
• Apply strategic judgement to inform build or buy decisions.
• Ensure that all IT applications adhere to relevant standards including those set out by the relevant technology governance structures.
• Provide cybersecurity technical leadership and guidance in ICAO, CANSO, SADC and other appropriate planning groups, sub-groups, working groups and task forces.
• Develop and maintain the applications roadmap in line with agreed company priorities, initiatives and expected operational service levels.
• Lead the evolution of IT applications to a secure private cloud, applying sound architecture principles and best practices to future-proof ATNS business capabilities.
• Provide hands-on technical leadership in the planning, design and implementation of new application solutions, coordinating own staff, suppliers, ATNS teams in order to meet identified requirements, budgets and timelines.
• Ensure routine standard operating procedures are documented, kept up to date and followed.
• Provide support for use of secure private cloud-based SaaS, PaaS and IaaS solutions, leveraging Enterprise agreements where possible to advance the ATNS cloud strategy.
• Ensure compliance with relevant legislation, regulation and compliance requirements including POPIA, GDPR, ECT,  National Cybersecurity Policy Framework, SA Cybersecurity crime ACT , Critical Infrastructure Protection act, ICAO Annex 17 and 13, ICAO Cybersecurity strategy and Action Plan, National Airspace Master Plan,  ICAO SARPS, Global Air Navigation Plan and AFI Air Navigation Plan. 
• Lead efforts towards the adherence to the appropriate aviation cybersecurity standards and changes thereof , i.e. Arinc 664, Arinc 811, Arinc 823 part 1, Arinc 823 part 2 , PREN 16495 Air Traffic Management , ED-201, ED-202A, ED-203 and ED-204.
• Provide strategic leadership and guidance in the management of IT applications, operations and security to ensure effective solution delivery and support to ATNS teams.
• Provide a trusted interoperable environment that enhances secure end-to-end communications and also protects critical systems in communication, navigation, surveillance and air traffic management elements such as ACARS, GPS, ADS-B, CPDLC, ground infrastructure. Develop and maintain CNS cybersecurity policies, process, procedures and standard reflective of the aviation systems' complete life cycle. i.e. BYOD, EFBs, Ticket Booking Portals, Identity & Access, Wireless Access Points, Gatelink, CDM, Baggage Handling, Departure Control, SCM , VPN and Wi-Fi Security Policy.
• Continuous vulnerability management on CNS systems by performing regular cybersecurity obligations, threat context and exposure, risk to establish maturity.
• Contribute to  the overall security strategy for the organization, ensuring that security is an intrinsic element of ATNS software development processes.
• Secure Software Development Lifecycle (SSDLC): Institute and enforce SSDLC practices, ensuring the infusion of security into every phase of development. 
• Keep abreast of technology trends, local and global regulatory requirements, and evolving best practices in solution delivery and application management.
• Provide cybersecurity controls (covering people, processes and technology) designed to protect CNS systems, networks and data from digital attacks. This includes in depth controls for all CNS systems and network security such as Next Generation Firewalls, Wireless/Wi-Fi Security, Authentication, DNS, VPN, Systems Hardening, Cryptography, Identity & Access Management, User Account management, Data Loss Prevention, Intrusion Detection and Prevention, Multifactor Authentication, Patch Management, Network Segmentation, Endpoint Security and Privacy by Design.
• Schedule and implement regular maintenance of applications  in order to maintain a reliable and stable IT environment
• Drive cybersecurity controls to ensure that the aviation infrastructure systems and information systems ranging from legacy systems to next generation satellite communication systems are resilient to cyber-attacks and remain safe and trusted globally, whilst continuing to innovate and grow in all the defined or determined areas within the South African sovereign and delegated continental and oceanic airspace
• Manage solution delivery initiatives, build or buy, to ensure quality coding and/or that solutions are delivered efficiently
• Review and update SSDLC to improve solution quality and delivery timeframes
• Partner with all stakeholders to meet functional requirements and to comply with regulatory requirements in a dynamic business environment
• Collaborate with all relevant technology peers in every phase of the value chain: project management, architecture, information security, quality assurance, business and technical specifications, third-party sourcing, etc.
• Facilitate continuous improvement of the application development/sourcing processes
• Establish appropriate metrics for performance measurement of the Applications Team.
• Container Security: Assure the security of containerized applications and images.
• Secrets Management: Safeguard and efficiently manage sensitive information and credentials utilized in the software development and deployment workflow.
• Vulnerability Management: Oversee and actively resolve vulnerabilities across the digital platform, collaborating closely with development and operations teams.
• SAST/DAST Controls: Implement Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) controls to spot and mitigate security risks.
• CVE and CVSS Management: Administer Common Vulnerabilities and Exposures (CVE) and Common Vulnerability Scoring System (CVSS) criticality and severities for software.
• Risk Management: Identify, evaluate, and mitigate security risks, partnering with teams to conceive risk mitigation strategies.
• Project Management: Supervise security-related projects, ensuring timely and budget-compliant completion.
• Agile Collaboration: Actively participate in planning meetings and stand-ups, addressing security concerns and risks within an agile development framework.
• Incident Response: Lead and coordinate security incident response, encompassing investigation and resolution.
• Policy and Process Management: Create, revise, or archive security policies and documented processes in alignment with industry best practices.
• Technology Trends: Stay abreast of emerging technology trends, frameworks, and security methodologies to bolster software security.
• Security Advocacy: Cultivate a culture of secure coding and configuration across all applications and features.
• Leadership and Team Management: Oversee and mentor a team of DevSecOps engineers and specialists. Set clear objectives, provide consistent feedback, and support team members' professional growth. Foster a collaborative and innovative team milieu.
• Define and continuously enhance DevSecOps processes and practices.
• Security Integration: Embed security practices throughout the software development lifecycle (SDLC). Collaborate with development, operations, and security units to implement security controls and best practices.
• Automation and Tools: Implement and manage SecDevOps automation tools and technologies. Continuously evaluate and select appropriate tools to augment the SecDevOps pipeline.
• Maintain constructive and productive stakeholder relations across the business and with relevant external parties
• Visible and active leadership of the organisation's applications landscape.
• Manage the allocation of duties and the performance of all staff in the team
• Determine capacity requirements (fixed and variable) to effectively deliver the required value and service.
• Manage outputs by third-party suppliers to ensure optimum value
• Develop and maintain together with the South African Civil Aviation authority a clear national governance and accountability framework for civil aviation cybersecurity to ensure coordination with competent national authority for cybersecurity.
• Develop a RACI matrix that clearly identifies and assigns information security roles for the various experts and stakeholders.
• Identify key risks, develop and implement effective mitigating plans and actions in order to avoid or minimise relevant risks, and report and raise these risks in the appropriate forums.
• Implement a cybersecurity resiliency metric to facilitate decision-making and accountability, to facilitate cyber maturity in CNS systems.
• Ensure that effective data recovery plans are in place to ensure business continuity in case of a disaster or potential threats.
• Ensure adherence and compliance with the relevant regulatory framework.
• Ensure training of all users on the applicable compliance and governance requirements.
• Identify the key SecDevOps-related risks across the business, and raise them in applicable forums.
• Ensure timely compilation and submission of all required reports (internal and external) to ensure compliance with all governance requirements.
• Ensure optimisation of human resources through effective deployment and management of skills.
• Develop a robust cybersecurity culture through structured training and awareness programs to capacitate staff from end to end, i.e. Cybersecurity Education, Training and Skills.
• Ensure that staff is managed in accordance with HC policies, processes and practices.
• Ensure continuous development of staff. Ensure that staff remain suitably trained to achieve expected performance outcomes in a dynamic technology environment.
• Create and maintain a harmonious and effective work environment to support a motivated, high-performance culture.
• Educate and upskill development teams and managers on secure coding practices, OWASP standards, and other IT security-related subjects.
• Ensure effective management of expenditure in line with business priorities and within financial parameters.
• Report on expenditure on a monthly basis, including possible deviations to the budget.

Minimum requirements

Minimum Qualifications

• Bachelor’s degree in Information Technology, Information Systems or a related field 
• Postgraduate Degree in Information Technology, Information Systems or a related field                
• Master's degree preferred.
• Certification: PMI-ACP, OSCP, CEH, CISSP. Other certifications like TOGAF, ITIL, COBIT or related certifications would be an advantage.
• Knowledge of cloud technologies (Infrastructure or DevOps or Solution Architecture). Certification will be advantageous. 
• ISACA Professional Registration would be an advantage.
• Leadership experience or qualification in a field relevant to aviation/aerospace/aeronautics would be an advantage.

Minimum Experience

• Seasoned professional required with minimum 10 years' experience in Information Technology of which at least 5 years' experience in SecDevOps or a related field, and 5 years' experience in managing technical team(s).
• Experience in a high technology electronic environment.
• In-depth knowledge and understanding of aeronautical communication, navigation, surveillance and satellite systems would be an advantage.
• Must be experienced in SecDevOps and Agile software development principles, an advocate of lean thinking and display an appreciation for cybersecurity and continuous improvement.

go to method of application »

Job description

• Upgrade conventional course material to Standardized Training Packages to TRAINAIR and ATNS standards
• Develop new courses as per TRAINAIR Plus Methodology - Standardized Training Packages (STP)
• Undertake preliminary instructional design studies processes, while adhering to the ATNS QMS with assistance from SMEs
• Draft training feasibility reports
• Conduct detailed task analyses
• Consult with internal and external clients (including SMEs) to investigate and propose instructional design or organizational development solutions.
• Draft training design reports
• Design curricula and/or syllabi, including definition of training objectives and mastery tests/assessments
• Produce material and complete development testing
• Validate course design, development and delivery and revise as required
• Design Project Plan or Training Development Plan (TDP)
• Draft training design reports in accordance with TRAINAIR or Educational Technology processes, while adhering to the ATNS QMS and with          assistance from SMEs
• Access the TRAINAIR global network to identify courses that may meet client requirements.
• Ensure backup/storage of validated course material on the Training Information System/LMS.
• Ensure compliance with Client, ICAO, SACAA, SAQA, TETA, ATNS, IATA & ATA rules, regulations, instructions, directives and educational best practices.
• Ensure that no Programme is developed when there is an existing Programme available that meets specification at a competitive price.
• Keep abreast of current and new training technologies which could be beneficial to ATNS
• Adhere to all accreditation and certification requirements as per accreditation agreements, contracts and legislation
• Process and present reports on training evaluation data to inform management on customer satisfaction levels
• Assist ATNS staff with educational/HRD research projects in accordance with recognized HRD research practices

Minimum requirements
Formal Qualifications

• B-degree  in Human Resources Development  or  Education
• Instructional Design Certificate or TRAINAIR Plus TDC 
• Post-graduate degree (Human Resource development or Adult Education) will be an advantage

Experience

• At least 2 years in curriculum design and development
• Experience in design and development of teaching and learning content
• Experience in teaching
• Experience in evaluation of training delivery

go to method of application »

Job description

Audit Planning and Preparation - 

• Conduct risk assessments and develop audit plans; Identify key objectives and scope of audits.  Plan and execute internal audit projects (including IT) in accordance with defined methodologies.   Engage with audit clients to identify key areas of the process under audit.

Audit Execution and Fieldwork -

• Assess the adequacy of ATNS policies and procedures in addressing identified risks;  Conduct testing of controls and gathering relevant data and evidence.  Analysis data and documentation to assess control effectiveness.  Document audit work, ensuring compliance with audit standards and organisational policies, and contributing to the preparation of audit reports.  Communicate with stakeholders to obtain necessary information.

Data Analysis and Reporting -

• Use data analysis tools to extract and analyse data sets.  Identify and clearly articulate thematic root causes and the impact thereof and recommend changes to business processes that will address the control weakness.  Contextualise findings and recommendations in relation to wider related risk, control and governance issues.  Draft audit reports with clear, actionable recommendations.  Present audit findings to management and stakeholders. 

Follow-up and Remediation - 

• Assist in identifying areas for process improvement and may be involved in discussions about potential recommendations to enhance internal controls.  Monitor the progress of remediation efforts and verify the effectiveness of corrective actions. 

Internal Audit Activities - 

• Assist the Senior Internal Auditor with other operational and reporting activities as required.  Identify opportunities for innovation in audit as well as client processes and develop practical solution to implement innovative practices.  Represent Internal Audit at appropriate client forums and committees as required.  Establish and maintain collaborative partnerships and a wide relationship network across business units and within Internal Audit.  Ensure that all client queries are dealt with proactively, accurately and within agreed timeframes by the team and yourself.  Share business intelligence through collaboration with business and dissemination of information.  Actively participate in fraud detection efforts by assessing fraud risks, implement fraud detection procedures, and investigate any suspected fraudulent activities.  Investigate whistle-blowing matters referred on time.  Provide input into the Internal Audit strategy and the delivery thereof.  Collaborate with other internal audit teams, external auditors, and departments within the organisation to ensure a coordinated and comprehensive approach to financial auditing.

Continuous Improvement and Professional Development- 

• Stay abreast of regulatory changes, industry trends, and emerging risks.  Contribute to the enhancement of audit methodologies and tools.  Contribute towards the maintenance of a Quality Assurance and Improvement Programme for internal audit.  Participate in training programs, certifications, and professional networking activities.

Minimum requirements

Minimum Formal Qualifications:

•   Bachelor’s degree in Accounting, Finance, Internal Auditing or related field
•   Professional certification (e.g. CIA or CA(SA), SAICA, Chartered Accountant will be an advantage

Minimum Years of Experience:

•  At least 3-5 years’ experience in internal/external auditing
•  Proficiency in audit and IT audit methodologies and techniques, tools including data analytics software, risk assessment, controls testing, sampling and documentation
• Understanding of financial and accounting principles, including IFRS and financial statement analysis, to evaluate financial controls and assess financial risk
• Ability to use data analysis tools and techniques to extract, and analyse data sets, identify trends, anomalies, and patterns, and support audit testing and conclusions is required.

go to method of application »

Job description

Major Activities

Ensure building safety and security by:

• Overseeing routine preventive and corrective maintenance on ATNS buildings (local and remote sites) and related infrastructure
•  Conduct regular inspections to ensure proper functioning of all equipment
• Implement emergency procedures and coordinate evacuations

Building maintenance and upkeep:

• Coordinate maintenance work, including repairs and renovations 
• Monitor utilities usage and report issues
• Ensure proper disposal of waste and maintain building cleanliness
• Develop and implement emergency procedures
• Coordinate evacuations, fire drills and other emergency exercises
• Manage subcontractors relating to security, pest control, painting, cleaning and gardening, as well as electricians and plumbers, and the maintenance and servicing of fire extinguishers, etc.
• Supervise ATNS vehicles in respect of logbooks, licenses, permits, record sheets and service schedules
• Address tenant complaints and requests
• Assist with new building projects or the upgrading of buildings and sites
• Ensure compliance with the Occupational Health and Safety Act and the ATNS OH&S plan
• Ensure compliance with ISO 9001 procedures

Minimum requirements

Minimum Qualifications

• Grade 12

Minimum Experience

• Minimum of 3 years experience in a Built Environment
• Driving and in possession of a valid code 8 license

go to method of application »

Job description

Strategic Alignment -

•  Ensure alignment of HC plans, projects and initiatives with business needs and objectives through effective business partnering with line management; Provide people management solutions that meet  business needs and resolve issues; Advise line managers on people management practices that promote the creation of an environment that emphasises collaboration, performance and the achievement of objectives;
• Use the integrated annual HC plans as a context for effective implementation of people management processes to support the achievement of Human Capital objectives; Contribute to the enhancement of Human Capital’s profile within the business through service delivery excellence.

HC Service Delivery -

• Partner with the HCBP to deliver comprehensive HC services within the designated business units  while ensuring compliance with HC governance and relevant legislation; Implement HC policies and processes and ensure that line managers are well informed. Play a key role in ensuring coherent implementation of HC plans and processes across the designated region; Provide guidance to employees on HC policy interpretation and application; Provide daily support to business and employees across all HC processes; Execute and facilitate the recruitment, selection and placement process to ensure acquisition of the required skills in line with business needs within optimal turnaround times;
• Ensure effective personnel administration by maintaining employee data and ensuring accuracy of management and staff records, statistics and information from employee engagement to exit; Partner with the  HCBP for execution of relevant Human Capital projects; Provide input on business unit restructuring, workforce planning, and succession planning as required; Check the payroll data in respect of employees in the designated business units on an ongoing basis to ensure the accuracy of leave, salaries and bonuses prior to each monthly pay run; Monitor employee time and attendance reporting, and ensure reporting and effective management of absenteeism; Coordinate the implementation of talent retention plans and programmes within the designated business unit; Monitor absenteeism, disciplinaries and grievances,  employee morale, and report/escalate to the HC Business Partner; Drive delivery of the required HC projects/initiatives within the business unit  within approved time, cost, and quality requirements; Utilise data analytics and metrics to inform the development of required solutions, programs and initiatives in partnership with the HC Business Partner; Educate managers and employees on HC practices, including compensation, performance feedback, performance calibration, and career development and transitions; Provide inputs and guidance on HC requirements for business projects action plans, and plan and monitor implementation of projects in partnership with line management; Ensure effective resolution of issues, and escalate when required.

High Performance Culture -

• Support line managers in the effective application of the performance management process to support the achievement of individual, team and business unit  performance objectives; Partner with ER /Wellness/ Transformation to ensure positive labour relations and a stable work environment within the business units; Promote the creation of a culture and work environment within the business unit that are conducive to  productive, collaborative and safe operations; Provide day-to-day guidance on performance management to line management in the form of coaching and counselling; Ensure adherence to the approved performance management calendar; Collaborate with line management in developing and implementing interventions aimed at establishing a positive employer-employee relationship, boosting employee morale and motivation.

Organisational Effectiveness and Change Management -

• Participate in the evaluation and monitoring of training programs within the business unit to ensure their efficacy in supporting individual performance; Support the implementation of the Employee Value Proposition (EVP) to facilitate the creation of a ‘Great Place to Work; Support the development and implementation of plans to effect required change as per HC’s transformation/ change management agenda;  Work closely with management and employees to improve work relationships, build morale, and increase productivity and retention; Partner with operational management to ensure organisational norms and values are integrated into the operation and ways of working in the region;

Stakeholder Relations Management -

• Develop sound relationships and build rapport with line management and employees; Ensure regular engagement and communication with line management, employees and other relevant stakeholders; Build, manage and maintain sound relationships with all relevant internal and external parties to support collaboration; Maintain relevant structures for effective engagement with stakeholders.

Governance, Risk Management, Compliance and Reporting -

• Ensure compliance with HC policies, processes, and legislation, and escalate non-compliance to the HC Business Partner; Implement all HC-related governance and controls to ensure no material audit findings; Communicate to, and train all relevant users on Human Capital policies and processes; Identify and report key HC risks to the HC Business Partner, and support the development of effective mitigating plans and actions in collaboration with line management to avoid or minimise such risk; Maintain the HC Business Partnership risk log for the designated business unit; Compile and submit reports required to ensure compliance.

Minimum requirements

Minimum Formal Qualifications:

•  Relevant degree in HR Management/ Social Sciences/ Organisational Psychology or related field is required
• Management / Leadership qualification is an advantage

 Minimum Years of Experience:

•  A minimum of 5 years progressive HR generalist experience with a strong background in business partnering in a complex operations environment.