Security Compliance Analyst: Windows at Sanlam Group

What will you do?

• The Security Compliance Analyst for the Windows platform will be responsible for managing configuration items related to the Windows environment in accordance with ITIL best practices.  This role will work very closely with the Windows administration team and other IT departments to ensure that the design, implementation and maintenance of security controls and best practices comply to our Sanlam Group and SGT policies, baselines, configurations and standards. The candidate should have knowledge of logical access principles, access design and security on the Windows operating system.  The ideal candidate will have experience in implementing and maintaining ITIL configuration management controls on Windows.  This role will also fulfil a governance role in identifying non-compliance and to monitor agreed designs and patterns.

What will make you successful in this role?

• Ensure the Windows operating system is hardened and reported on.
• Make use of PAM (jumpbox and vault) and strong passwords.
• Apply a Logical Access baseline (apply principle of least privilege) and agree on the relevant reporting/alerting.
• Address O/S-level Vulnerabilities.
• Resolve O/S-level related audit findings and avoid any recurrence.
• Work closely with the Windows administration team to ensure that all changes are properly assessed, approved and documented.
• Assist with the development and implementation of new processes and procedures in accordance with ITIL best practices.
• Collaborate with other IT departments to ensure that all configuration items are properly integrated and aligned with overall IT services and infrastructure.
• Continuously improve management processes to optimize efficiency and effectiveness.
• Provide platform control evidence to internal and external auditors.
• Continuous Access review and clean up (where it is the responsibility of the Windows Administrator).

Qualification and Experience

• Successful completion of Grade 12
• Post grade 12 Diploma or Degree in Information Technology or equivalent 
• Relevant certification such as ITIL Foundations or ITIL Intermediate – Service transition will be advantageous

Experience

• A minimum of 3-4 years’ experience in the Windows environment (Windows Administrator or in ITIL configuration management)
• Logical access principles
• Windows security
• Learning orientation
• Attention to detail
• Integrity and trust / relationship building
• Ability to work under pressure
• Strong analytical and problem-solving skills
• Ability to work independently and part of a team

Knowledge and Skills

• Assessing security risks
• Security solutions
• Project management
• Business requirements
• IT governance, compliance and quality improvements

Personal Attributes

• Decision quality - Contributing through others
• Interpersonal savvy - Contributing through others
• Optimises work processes - Contributing through others
• Plans and aligns - Contributing through others

Core Competencies

• Being resilient - Contributing through others
• Collaborates - Contributing through others
• Cultivates innovation - Contributing through others
• Customer focus - Contributing through others
• Drives results - Contributing through others