The hearX Group offers the world's first clinical smartphone hearing test solutions. Our award-winning products are used in over 25 countries. Our aim is to impact on an individual, community and global level by creating sustainable, smart solutions for hearing health for everyone.
Read more about this company
Job Purpose:
- Responsible for company-wide cybersecurity and related documents, process and record management to ensure that systems and products are safe and effective. Ensures data integrity, and that information is kept accurate and consistent unless authorized changes are made (and documented), and that confidentiality is upheld by protecting information from unauthorized access. Responsible for cybersecurity compliance and training throughout the Company.
- As our Security Engineer, you'll support us by working with the team to perform ongoing operations, administration, and development of security systems. You will continuously work towards high confidence and high accuracy detection rules leveraging abnormal or suspicious events.
Minimum education (essential):
- Engineering degree (Computer, Software or Electronic)
- Minimum education (desirable): CISM (Certified Information Security Manager) or CISSP (Certified Information Systems Security Professional) or CCSP (Certified Cloud Security Practitioner) ITIL Certified
- Minimum applicable experience (years):Minimum 5 years experience in Technology & Software Minimum 3 years experience in Cybersecurity
Required nature of experience:
- 3 years in any of: Scala, Go, Java, NodeJS/JavaScript/Typescript/Ruby
- Extensive exposure to CI/CD frameworks: (Jenkins, Code Pipeline + CodeBuild)
- AWS' ecosystem
- AWS Well Architected Framework
- Trusted Advisor
- GuardDuty / SCP / SSM / IAM / WAF
- Container services such as ECS/EKS.
- Experience deploying auto-scaling and load-balanced Highly Available applications.
- Hands-on experience with Infrastructure-As-Code tools to automate infrastructure and deployments in AWS, preferably CloudFormation and CDK.
- Experience reviewing and evaluating development concepts to identify gaps in business processes and controls to assist in the design and documentation of the processes.
- Experience drafting and implementing security policies, security procedures, security design and implementation
- Experience with incident detection and management
The following experience/knowledge would be advantageous:
- ISO 14971 (risk management) compliance
- ISO 27032 (cybersecurity) compliance
- SOC2 Type 2 (with HiTrust attestation) or HiTrust experience (or equivalent)
Skills and Knowledge (essential):
- Deep understanding of automation, quality engineering, architectural methodologies, principles, and solution design
- Familiarity with operational observability, including log aggregation, application performance monitoring, etc
- Be familiar with CI/CD pipelines and use of tools such as Github Actions..
- Understanding of the following: Linux/Windows server and application administration and configuration, networking, scripting and automation, large scale distributed computing architecture
- Solid knowledge of IT security (FortiGate firewalls, EDR, IDS/IPS, SOAR(Rapid7), vulnerability scanning (InsightVM,) forensic and Threat Hunting)
- Understanding of Kubernetes and Containerisation (Docker/Podman/Containerd) with implementation, support, and design.
- Knowledge in security classification frameworks like MITRE or the cyber-attack kill chain
- Good knowledge and understanding of industry standards, memberships, and frameworks such as CIS and ISO-27001
DevOps (30%)
- Design cloud development infrastructure.
- Automate deployments in AWS and Azure (and other cloud tools as required).
- Improve the automation of security controls.
- Work closely with the dev team on defining industry-standard processes and system requirements, identifying and proposing fixes to shortcomings in dev lifecycle.
- Review and evaluate development concepts (for existing products and during design phase for new products) to identify gaps in business processes and controls to assist in the design and documentation of the processes.
- Design and implement updates to the team which includes
- Cloud Conformity
- WAF status
- Certificate Management
- Work with dev team to uplift the security posture of consumer accounts using
- Work with the dev team to ensure that security standards and policies are being set up and configured correctly.
- Drive Cloud Security LRP standards, implementing enterprise minimum security requirements:
- Data Masking
- Encryption monitoring
- Perimeter protections
- Ingress / Egress uplift
- Define and maintain backups and backup systems.
- Design and implement CI and CD pipelines.
- Monitor infrastructure and deployments, ensuring deployment stability.
- Generate and maintain effective and efficient high quality, reusable code.
Cybersecurity Management (30%)
- Drive development standards and processes related to cybersecurity compliance
- Monitor all cybersecurity processes, operations and infrastructure, monitoring internal and external policy and regulatory compliance.
- Liaise with internal and external stakeholders to prepare for SOC2 Type I (and future roadmap towards HiTrust).
- Drive cybersecurity audit strategy and readiness from a dev, security and devops perspective.
- Identify, implement and maintain all security tools and technology.
- Schedule (and ideally automate) ASV scans and internal vulnerability scans, remediating findings and ensuring accurate & timely reporting to satisfy PCI DSS requirements.
- Schedule annual Penetration Tests with external supplier(s) and ensure implementation of items identified in remediation plans.
- Complete required cybersecurity applications and records for large customers and audits, including reporting as required.
Infrastructure Management (30%)
- Advise on the planning, installation, monitoring and maintenance of IT systems and infrastructure focused on cyber security.
- Design and execute short- and long-term strategic plans to ensure infrastructure (cloud, security and devops) capacity meets current and future needs.
- Develop, execute and oversee procedures, policies and related training plans for cybersecurity project management and infrastructure administration.
- Conduct research and recommend changes in services, products, protocols, and standards to support development efforts and infrastructure procurement.
- Define and manage Disaster Recovery Strategy for the organization.
- Define software and hardware standards in collaboration with stakeholders and owners.
- Ensure appropriate security levels on network, infrastructure and servers are maintained, ensuring that the IT team follows the requirements set in line with cybersecurity standards.
- Implement cybersecurity continuous improvement programs.
- Crisis management - keeping stakeholders informed and actively working with teams to return service in the shortest possible time frame
- Effective management and optimisation of vendors (where applicable) as well as collaborating with the dev and IT teams as necessary
Risk Management and Compliance (5%)
- Collaborate with divisional Product Owners to define and centralise risks and put mitigation measures in place for new and existing products and services, from a cybersecurity and privacy perspective.
- Remediate audit items by putting measures in place to prevent the reoccurrence of findings.
- Participate in various internal and external audits as required with relation to cybersecurity and devops.
- Maintain documentation for cybersecurity-related risks.
QMS and Documentation (5%)
- Proactively keep stakeholders updated on status, progress, risks and problems.
- Review and approve documented outcomes of Penetration Tests, Remediation Plans and required activities.
- Review and approve documented outcomes of Vulnerability Scans, Remediation Plans and required activities.
- Maintain cybersecurity documents and records in line with certification requirements.
- Maintain document bank and matrix for the cybersecurity setup and external customer-audit matrix requests.
go to method of application »
Job Purpose:
- Responsible for collaborating with the marketing team to work towards the common goal of the Marketing Department to assist and support the revenue goals of the B2C division, with a special focus on ensuring success with key partners and retailers.
Minimum education (essential):
- BCom Marketing Management or related Commerce degree
Minimum education (desirable):
Minimum applicable experience (years):
Required nature of experience:
- Business to Consumer marketing.
- Experience in international markets.
- Analysing and reporting of marketing campaign performance.
- Representing the company as a key contact person for external stakeholders.
Skills and Knowledge (essential):
- Proficient in Microsoft Suite or Google Suite
- Marketing research
- Understanding of WordPress
- Excellent writing skills
- Excellent organisational and planning skills
- Building rapport and relationships with key partners, suppliers and retailers.
Essential Competencies:
- Generating Ideas
- Thinking Positively
- Team Working
- Meeting Timescales
- Checking Things
- Managing Tasks
- Producing Outputs
- Taking Action
Important Competencies:
- Documenting Facts
- Developing Expertise
- Exploring Possibilities
- Establishing Rapport
- Convincing People
- Articulating Information
- Showing Composure
- Inviting Feedback
- Valuing Individuals
- Upholding Standards
- Following Procedures
- Seizing Opportunities
B2C Marketing Management (25%)
- Get approval from relevant line manager for marketing expenses as they occur and report on this to line manager, ensuring spend in in line with budget line items.
- Ensure that Marketing folders are kept up to date and that all files are saved in the relevant folders.
- Collaborate with internal and external teams for all event planning (including conferences, awards, shoots and other events) where such events are approved in the strategy.
- Conduct research on,assist with, and ensure applications are submitted for relevant awards to increase brand credibility.
- Keep brand accreditations up to date.
- Conduct website testing and reviewing of promo content pre and post deployment.
- Update task management platform on behalf of the immediate team.
- Develop customer reviews strategy on collection, quantifying of review themes, and the reporting thereof.
- Provide assistance during the structural design process of new packaging.
Affiliate Marketing (20%)
- Ensure affiliate sales and returns are recorded daily.
- Updating of coupons and other marketing material on affiliate platform.
- Sending of mailers to affiliates through the affiliate platform.
- Collaborate on the compilation of theaffiliate strategy and driving of revenue targets and outcomes.
- Perform checks on existing affiliates to assess performance and group accordingly.
- Recommend ways to incentivise and motivate affiliates.
- Void sales on affiliate platform.
- Cultivate proactive relationship management with affiliates, with a focus on key affiliates (top sellers).
- Provide effective support to affiliates.
- Analyse and compile affiliate reports.
- Report on affiliate keyword violations.
Influencer and Sponsored Content Marketing (15%)
- Conduct research on promising influencers and sponsored content opportunities
- Ensure that influencers’ database is kept up to date with information on promising and active influencers
- Contribute to relationship building with influencers and sponsored content partners by continuous communication and assistance with requests.
- Contribute to planning of influencer campaigns.
- Provide assistance with all arrangements to launch sponsored content initiatives.
- Compile influencer and sponsored content performance reports.
- Provide support to influencers.
Traditional Marketing (10%)
- Recommend traditional marketing suppliers for advertising opportunities (e.g. newspapers, direct mail, radio)
- Collaborate on the compilation of traditional marketing strategies.
- Collaborate with the larger team to execute traditional marketing campaigns.
- Contribute to planning, facilitating and reporting of traditional marketing campaigns.
- Compile traditional marketing campaign performance reports.
Retail partnerships (25%)
- Primary liaison with key retail partners, responsible for attending calls, minuting meetings as they pertain to marketing, allocating responsibilities in the marketing team, coordinating all in-store and online marketing requirements and supporting our retailers in all efforts.
- Monitor the status of tasks pertaining to marketing and send reminders where necessary.
- Liaise with retailers, suppliers, and internal teams to organisein-store displays and/or other marketing requirements.
- Ensure open communication is maintained between the Key Accounts Manager, operations and marketing.
- Continuously monitor progress of suppliers to ensure retailer deadlines are met for in-store displays.
- Provide support to all retailer partners and internal teams.
- Report to larger team and retailer partner on project progress.
QMS (5%)
QMS: Sales and Marketing
- Ensure that QMS guidelines are adhered to.
- Ensure that all supporting documents and records are kept to date.
- Ensure that all processes are kept relevant.
go to method of application »
Job Purpose:
- This division oversees company-wide data and insights, driving the strategic objective of the creation of a data strategy and data value: help us turn our data into intelligence.
- Establish best practices, systems and services for leading data intelligence across the company, with world-class tools and services. Drive data-driven approach and decision making with the goal of driving customer success and company profitability.
- Be curious and understand the underlying causality on key issues, data, strategic objectives and projects, including customer and channel journeys.
Direct Report:
- Business Intelligence analysts x 3
- Business Analyst
- Minimum education (essential): Certification / Accreditation in Business Intelligence
- Minimum education (desirable): Relevant Information Technology degree or diploma
- Minimum applicable experience (years): 5 years
Required nature of experience:
Team management
- Five (5) + years of proven experience in a BI stack framework as a BI developer or data scientist.
- Experience building business reports using Excel or BI tools (ie QlikSense, BigQuery, Power BI, Tableau).
- Python or R experience would be beneficial.
- Background in data warehouse design (e.g. dimensional modeling) and data mining.
- Experience in the medical tech field would be beneficial.
- Data driven thinking and experience in understanding data structures and relationships and how to tell a story with it.
- Experience in establishing, monitoring and optimising customer journeys (from marketing through to support and retention).
Skills and Knowledge (essential):
- Advanced knowledge of Microsoft Excel (macros, pivot tables, formulas).
- Database management, BQuery and SQL Server skills including SQL objects development, performance tuning, data analysis and integration.
- In-depth understanding of database management systems, online analytical processing (OLAP) and ETL (Extract, transform, load) frameworks
- Strong analytical, troubleshooting skills and root-cause analysis ability.
- Knowledge in technology such as Power BI, Big Query, Qlik or similar SaaS data visualisation tools.
- Proven abilities to take initiative and be innovative.
- Critical thinking skills, to discover underlying causality.
- High attention to detail and troubleshooting skills.
KEY PERFORMANCE AREAS, WEIGHTS AND OBJECTIVES
Team Management & Development (20%)
- Increase team’s effectiveness and optimisation with the following:
- Recruitment, selection and orientation;
- Training and development;
- Assign accountabilities and plan;
- Drive team outcomes;
- Monitor and appraise job and project results;
- Ensure the team meets timelines and produces content of the highest quality and accuracy.
- Continuously develop the competencies of the division, building out an effective and efficient team in line with company strategy.
- Drive effective stakeholder management and communication (both internal and external).
- Ensure accuracy (through checks and fail safes) of the division’s data system.
- Select and continuously optimise divisional tools to drive efficiency, transparency, accuracy; in line with budget allocation to ensure best-in-class intelligence.
- Review and sign off on all intelligence reports and dashboards, ensure accuracy (and value) of information and interpretations being provided.
- Ensure continuous improvement of business intelligence tools, dashboards and databases, working across teams and development resources as required.
Data Intelligence Strategy (20%)
- Driving the strategic objective of the creation of a data strategy and data value: turn data into intelligence.
- Drive data-driven approach and decision making across the company.
- Connecting business functions through intelligence: Development, Product Dev, Product Management, Marketing, Hearing Hub (support and sales contact centre), driving communication and collaboration.
- Be curious and understand the underlying causality on key issues, strategic objectives and projects, including customer and channel journeys, advising strategy and budget spend in channels accordingly.
Data Intelligence Processes (30%)
- Establish systems and services for leading the data intelligence across the company, with world-class tools and services.
- Stipulating a data collection process and thinking through what we collect and why and how we use that to optimize journeys.
- Manage key relationships relating to data and customer success.
- Direct data and insights to address and improve operational inefficiencies, lack of process adherence, and marketing: sales outcomes.
- Analyse operational and procedural problems, and develop, recommend, and implement proposed solutions.
Intelligence-driven Strategy & Advisory (10%)
- Drive strategic intelligence projects, with effective full lifecycle project management.
- Identify issues, bugs, and bottlenecks and devise solutions (or advise on solutions) to these problems.
- Identify opportunities to improve data processes and collection and processing strategies with technology solutions.
- Inform business process improvements, operationalization and optimization using data and appropriate visualisations.
- Advise on risk analysis and mitigation using the output from the BI tools implemented.
- Increase profitability of products and company through advising on inferences from the data collected.
Communication and Documentation (15%)
- Drive the development of policies and procedures for the strategic collection and analysis of data.
- Ensure division communicates proactively, effectively and efficiently with stakeholders (internal and external)
- Approve the documentation for relevant records as is necessary for compliance to ISO, HIPAA, GDPR, CE, FDA and SOC2 (and other) standards and requirements with regards to data integrity, processing and protection.
- Efficient and effective reporting on prioritisation and tasks to Line Manager.
- Take personal ownership for projects and work quality as well as contributing to team development and the hearX ecosystem as a whole.
Method of Application
Use the link(s) below to apply on company website.
Build your CV for free. Download in different templates.