Security Compliance Analyst: Cloud/DevSecOps at Sanlam Group

What will you do?

• The Security Compliance Analyst for the Cloud and DevSecOps platforms will be responsible for managing configuration items related to the Cloud and DevSecOps environments in accordance with ITIL best practices.  This role will work very closely with the Cloud administration team, DevSecOps team and other IT departments to ensure that the design, implementation and maintenance of security controls and best practices comply to our Sanlam Group and SGT policies, baselines, configurations and standards. The candidate should have knowledge of logical access principles, access design and security in the Cloud and DevSecOps environments.  The ideal candidate will have experience in implementing and maintaining ITIL configuration management controls in the Cloud and DevSecOps.  This role will also fulfil a governance role in identifying non-compliance and to monitor agreed designs and patterns.

What will make you successful in this role?

• Apply a Logical Access baseline (apply principle of least privilege) on the platform and agree on the relevant reporting and alerting.
• Assist with the implementation of User and Service Account Access reviews on NetIQ and clean up (where it is the responsibility of the Cloud Administrator or DevSecOps team).
• Resolve platform related audit findings and avoid any recurrence.
• Address vulnerabilities,only Cloud.
• Assist with the development and implementation of new processes and procedures in accordance with ITIL best practices.
• Collaborate with other IT departments to ensure that all configuration items are properly integrated and aligned with overall IT services and infrastructure.
• Continuously improve management processes and tools to optimize efficiency and effectiveness.
• Provide platform control evidence to internal and external auditors.

Qualification

• Successful completion of Grade 12
• Post Grade 12 Diploma or Degree in Information Technology or equivalent 
• Relevant certification such as ITIL Foundations or ITIL Intermediate – Service transition will be advantageous

Experience

• A minimum of 3-4 years’ experience in the Cloud and DevSecOps environment (Cloud Engineer/Administrator, DevSecOps Engineer or in ITIL configuration Management)
• Logical access principles 
• Role-based access design
• Cloud and DevOps security
• Learning orientation
• Attention to detail
• Integrity and trust / relationship building
• Ability to work under pressure
• Strong analytical and problem-solving skills
• Ability to work independently and part of a team

Knowledge and Skills

• Assessing security risks
• Security solutions
• Project management
• Business requirements
• IT governance, compliance and quality improvements

Personal Attributes

• Decision quality - Contributing through others
• Interpersonal savvy - Contributing through others
• Optimises work processes - Contributing through others
• Plans and aligns - Contributing through others

Core Competencies

• Being resilient - Contributing through others
• Collaborates - Contributing through others
• Cultivates innovation - Contributing through others
• Customer focus - Contributing through others
• Drives results - Contributing through others