Job Opportunities at Believe Resourcing

The Position:

• Our client is seeking a talented Information Security Analyst, to join their Information and Cyber Security team. This is a role that plays a critical part in ensuring that they derive value from their investment in Information and Cybersecurity and report to the Senior Manager of Information and Cybersecurity Services in the Enterprise Infrastructure Services division.
• You will be responsible for evaluating and strengthening the security posture through continuous vulnerability, incident handling, and security assessments. If you have the skills and are excited by all things cyber, then keep reading.

Qualification and experience required for the contractor role:

• Relevant qualification at NQF level 7 and
• 10 years’ experience in enterprise ICT applications and infrastructure of which 5 years must be relevant current technical hands-on experience

Skills and competencies required 

• Knowledge of (or at least a strong interest in and exposure to) information security concepts and technologies such as IDS, and endpoint security products, SIEM and SOAR platforms, web application firewalls, network security, computer security, digital forensics and vulnerability management methodology and tools
• Experience in handling the entire lifecycle of your assigned security incidents from detection to resolution and root cause analysis
• Knowledge and experience in implementing and configuring enterprise antivirus solutions (server and Desktop)
• Exposure to specialized IR processes such as reverse engineering, red/blue team exercises, forensics and investigations of data exfiltration and lateral movement
• System Administrator knowledge and working experience in Windows/Linux environments
• Fundamental knowledge and experience with Vulnerability and Patch Management within an Enterprise environment
• Experience providing security architecture guidance to systems administrators and developers
• Understanding of information security frameworks (e.g., ISO, NIST) and digital forensic methodologies and possible shortcomings they may have.
• Confidently and professionally interview/question users to determine or confirm root cause
• Communicate effectively with response and business partners
• Experience in providing status updates to executives and stakeholders in non-technical terms encompassing risk, impact, containment, remediation, etc.
• An autonomous / self-managed work style

Advantageous Skills

• Scripting and basic programming in PowerShell and
• Building and monitor SIEM alerting and
• Current Industry-recognized certifications g., Security+, CEH, CISA, CISSP, OSCP
• Working understanding of applicable legislation (security and privacy)
• Relevant NQF 8 qualification and/or experience in Higher Education is advantageous

Responsibilities include:

• Monitoring the university’s network for information and cybersecurity anomalies
• Handling the entire lifecycle of your assigned security incidents from detection to resolution and root cause analysis
• Planning and implementing information and cybersecurity measures to protect computer systems, networks and
• Providing input to disaster recovery plans
• Performing risk assessments and recommending information and cybersecurity controls and technical measures (e.g., firewalls, data encryption)
• Recommending information and cybersecurity enhancements
• Developing and implementing information security related processes, systems, and services through project work
• Providing technical leadership for one or more information and cyber security systems and/or service components
• Contribute and participate in information security awareness drives and campaigns
• Develop and maintain security policies and procedures
• Engage with infrastructure, application support, and development teams to ensure security best practices
• Review existing and new technology architecture for data privacy and protection compliance
• Review existing and new technology to ensure it adheres to corporate information security
• Work with information security engineering to ensure all security tools are deployed
• Educate and promote secure software development lifecycle
• Assess current technology architecture for vulnerabilities, weaknesses, and for possible upgrades or improvement
• Assist with Ad hoc duties from time to time
• Assist with Projects as allocated by the line manager

go to method of application »

THE POSITION:

• This is an opportunity for one experienced IT Project Managers (PM’s) to be a part of our client’s exciting journey as it refines its IT Strategy in line with its strategic objectives and continues to explore and deliver innovative, quality ICT services to its students, academics, researchers and broader stakeholder community.
• The University is seeking to employ one senior IT PM’s in its Information and Communication Technology Services (ICTS) department. A hybrid - remote working model is on offer with most of the work and engagements conducted virtually. However, the occasional, in-person engagement may be required onsite at the Cape Town-based offices. 
• The environment is results-driven and one where team members are trusted, supported, and empowered to deliver and grow, where a healthy work-life balance is promoted, contributions are valued, and achievements are celebrated.
• Do you excel in planning and managing projects? Are you proactive, dynamic, motivated, and passionate about IT and Project Management? Are you able to navigate organisational structures and “read the room” to establish rapport and build strong working relationships with diverse stakeholder groups? Do you have a track record of effectively managing project teams comprising both technical and “business” resources? Are you proficient in Waterfall and Agile project management methodologies and in the use of appropriate project control mechanisms with a strong grasp of project governance requirements?

WHO YOU ARE AND WHAT YOU WILL HAVE:

• excellent verbal, written interpersonal communication skills
• well-developed leadership skills
• demonstrate a customer-centric focus with high levels of personal credibility and an ability to develop strong stakeholder relationships and manage expectations
• demonstrate high levels of enthusiasm, initiative, and adaptability
• have strong planning, time management, analytical thinking, and problem-solving skills
• have a track record of accountability and integrity, taking ownership and following through on commitments
• have a track record of quality delivery with attention to detail
• work well independently and as part of a closely-knit team, committed to continual learning 

PURPOSE OF THE ROLE:

• The main purpose of the role is to effectively plan and manage IT projects by utilizing industry standard project management methodologies, principles, and control mechanisms through the full project lifecycle from initiating, planning, design, (iterative) build and implementation, through to successful closure of the project.

MINIMUM REQUIREMENTS:

• At least an NQF level 5 qualification in Information Systems, IT Management, IT Project Management or a related field;
• A completed, industry recognised, Project Management Certification (at practitioner level);
• A minimum of 8 years’ relevant IT Project Management experience serving as the Lead Project Manager on complex, large-scale ICT projects;
• A proven track record of successfully leading projects with diverse stakeholder groups including technical teams, business stakeholders / senior management and 3rd party technology partners / service providers;
• A strong track record of effective personal and team leadership;

 ADDITIONAL REQUIREMENTS:

• At least 8 years’ relevant experience in managing a combination of Technology infrastructure and Application / Systems related projects with a strong grasp of the Systems Development Lifecycle;
• A proven track record of establishing effective project governance, and producing and maintaining required project documentation and artifacts;
• Excellent oral, written and interpersonal communication skills;
• Strong planning, organizing, coordinating and time management skills;
• Strong group facilitation and presentation skills;
• Medium to advanced proficiency in the use of MS Office and recognised project management

 THE FOLLOWING WOULD BE TO YOUR ADVANTAGE:

• An accredited post-graduate diploma in project management;
• Familiarity with the Higher Education Sector in South Africa;
• Experience in Organisational Change Management as an enabler for successful project delivery;

go to method of application »

PURPOSE OF THE JOB:

• To ensure Our Client's Information Security Management System is maintained and the compliance of staff and policies, procedures, guidelines, and standards used to support the effectiveness of the ISMS.

WHAT YOU NEED TO QUALIFY:

Preferred skills: 

• Meticulous attention to detail
• Ability to work under pressure to strict deadlines
• Ability to work towards team and individual targets
• Building and maintaining effective working relationships, with both internal and external teams, and clients.

 Qualifications required: 

• Bachelor’s degrees in Computer Science or Computer Engineering or Cyber Security
• Industry-related certification required (e.g. CISM, CISA, CEH, etc.) preferred ISO 27001 Lead Auditor preferred
• Previous experience in a BPO environment

THE JOB:

Key Responsibilities: 

• Carry out all ISMS activities to ensure maintenance of SOC-2 type 2, ISO 27001:2005, PCI-DSS certifications at South Africa and Bangladesh sites
• Conduct risk assessments on client operations and ensure client’s information security requirements are effectively addressed
• Assist the central management team in overseeing compliance activities relating to information security and privacy
• Act as the central coordinator for actual / potentially Information Security and Privacy incidents at the location and Lead the investigations.

Professional Knowledge and attributes required:

• Excellent English communication skills (written and verbal)
• Superior understanding of ISO27001, SOC-2 and PCI-DSS and integration and maintenance within an ISMS
• Good working knowledge of Information security related requirements
• Solid Knowledge of IT Corporate Governance Principles
• Ability to evaluate and analyze threat, vulnerability, impact and risk to security issues discovered from security assessments
• Advise on InfoSec security issues, including explanation on the technical details and how they can remediate the vulnerabilities in the systems
• Manage information protection and data privacy with an understanding of POPIA and European GDPR
• Strong understanding of Information technology / IT security concepts
• A good understanding of various information system technologies including: Active directory, Networking, LAN / WAN, firewalls, IDS / IPS, Log management systems, web content filtering systems, enterprise Antivirus management systems, Patch management, OS hardening guidelines, etc.
• Information system auditing experience
• Sound working knowledge of the latest Microsoft packages (Word, Excel, PowerPoint & Outlook)
• Design security guidelines and controls to enforce security on web-based applications using Threat Modeling, Threat Profiling, OWASP Top Ten Testing, Black Box Testing, and Source Code Reviews.
• Facilitate external VA/PT audits, Application Security Audits, and customer audits, and actively project-manage the remediation of audit findings