Security Compliance Analyst: Application Platfor at Sanlam Group

What will you do?

• The Security Compliance Analyst for the Application platform will be responsible for managing configuration items related to the Application environment in accordance with ITIL best practices.  This role will support Application development & Support Squads to adopt, implement and maintain approved patterns to ensure security best practices to comply to our Sanlam Group and SGT policies, baselines, configurations and standards. The role will assist application owners (both technical and business) by setting a standard for documenting logical access processes/procedures for particular application domains and ensuring that the necessary signoffs are complete.  The ideal candidate will have experience in implementing and maintaining ITIL configuration management controls within the application landscape.  This role will also fulfil a governance role in identifying non-compliance and to monitor agreed designs and patterns.

What will make you successful in this role?

• Ensure clean-up of non-compliant access. 
• Use of PAM vault for application owned service accounts (apply principle of least privilege).
• Perform Service account review on NetIQ for accounts owned by the application.
• Resolve application related audit findings and avoid any recurrence.
• Ensure that logical access processes are documented and signed off.
• Evaluate outputs of regular user and support environment role accesses reviews.
• Assist project development teams with logical access design for new bespoke applications.
• Work closely with the Application development & Support Squads to ensure that all changes are properly assessed, approved and documented.
• Assist with the development and implementation of new processes and procedures in accordance with ITIL best practices.
• Collaborate with other IT departments to ensure that all configuration items are properly integrated and aligned with overall IT services and infrastructure.
• Continuously improve management processes to optimize efficiency and effectiveness.

Qualification

• Successful completion of Grade 12
• Post Grade 12 Diploma or Degree in Information Technology or equivalent 
• Relevant certification such as ITIL Foundations or ITIL Intermediate – Service transition will be advantageous

Experience

• A minimum of 3-4 years’ experience in the Application environment or in ITIL configuration management
• Good understanding of logical access principles for structured and unstructured platforms
• Role-based access design adoption and address exceptions
• Application security
• Security Architecture:  IAM and RBAC integration, SSO technologies, risk assessment
• Thorough understanding of Application integration architecture
• Learning orientation
• Attention to detail
• Integrity and trust / relationship building
• Ability to work under pressure
• Strong analytical and problem-solving skills
• Ability to work independently and part of a team

Knowledge and Skills

• Assessing security risks
• Security solutions
• Project management
• Business requirements
• IT governance, compliance and quality improvements

Personal Attributes

• Decision quality - Contributing through others
• Interpersonal savvy - Contributing through others
• Optimises work processes - Contributing through others
• Plans and aligns - Contributing through others

Core Competencies

• Being resilient - Contributing through others
• Collaborates - Contributing through others
• Cultivates innovation - Contributing through others
• Customer focus - Contributing through others
• Drives results - Contributing through others