Security Engagement Lead at Shoprite Group of Companies

About the Job

Purpose of the Job

• The purpose of the Security Engagement Lead is to lead a team of cloud security engineers responsible for securing cloud-based digital platforms and plays an integral role in engaging with business units in order to ensure the organization's digital platforms are protected. This role involves analyzing existing cloud security measures/controls and creating new and enhanced security methods.
• This role is part of a larger team dedicated to cloud-based management and security. The role is also responsible for the development and execution of large-scale cyber security initiatives and requires a professional with problem-solving abilities who can work in a fast-paced environment and has a clear passion for cloud security and cloud technologies.

Job Category

• IT

Job Objectives

• Lead and mentor a team of cloud security engineers.
• Provide assurance through collaboration with other stakeholders that all cloud and digital platforms meet the organization's security requirements.
• Provide security recommendations on cloud-based data security, platforms and application development.
• Recommend innovative technologies or other methods that will enhance the security of cloud-based environments.
• Serve as the subject matter expert (SME) on cloud security.
• Develop standards, policies and procedures as well as best practices documentation.
• Translate security and technical requirements into business requirements and communicate security risks to different audiences ranging from business leaders to engineers.
• Influence multi-disciplinary teams in implementing and operating cyber security controls.
• Work closely with application developers to deliver creative solutions to complex technology challenges and business requirements.
• Automate security controls, data and processes to provide better metrics and operational support.
• Utilize cloud-based APIs when appropriate to write network/system level tools for securing cloud environments.
• Stay current on emerging security threats, vulnerabilities and controls.
• Identify and implement new security technologies and best practices.
• Create technical and managerial level reports and conduct risk assessments for Cloud-based applications and infrastructure.
• Identify processes/procedures for how to handle cloud security events, including forensic isolation and mitigation with Digital Forensics and Incident Response teams.
• Identify new security threats by conducting continual monitoring, penetration testing, vulnerability assessments and log analysis.

Qualifications

• Degree/Diploma in IT, Information Systems, Systems Support or related field.
• Recognized industry certifications in cloud security, Systems Security Certified Practitioner (SSCP).

Experience

• +2 years’ experience in a team leadership capacity or similar with demonstrable experience leading and/or efficiently managing the delivery of security engineering engagements with key business and IT stakeholders to ensure highly secure enterprise-wide IT infrastructure.
• +5 years' experience in a cyber security role with hands-on expertise in cloud security.
• Solid experience with specific exposure to mentoring and coaching a team, providing technical leadership and driving high performance within the context of security engineering.
• Technical knowledge of system security compliance and practice in IT systems operations with relevant regulations (PCI DSS, ISO standards, POPIA, etc.) or working within those frameworks.
• Expert knowledge of services related to cloud computing, network, storage, content delivery, administration and security, deployment and management, automation technologies.
• Good understanding and exposure to cloud standards, architecture and models.
• Practical experience with AWS WAF and/or Azure Frontdoor.
• Experience with open-source software security.
• Solid knowledge of internet & network protocols with PKI, SSL, SSH etc. and deep packet inspection.
• Hands on knowledge of automation and DevSecOps, microservices, Kubernetes, docker, etc.
• Good understanding of software development principles, including design patterns, code structure, programming languages, continuous integration, continuous deployment, and deployment orchestration.
• Robust microservices programming (AWS Lambda, Docker, etc.)

Knowledge and Skills

• Relating and networking - Easily establishes good relationships with business unit and Technology staff; relates well to people at all levels; builds wide and effective networks of contacts; uses humour appropriately to bring warmth to relationships with others
• Leading and supervising - Communicates a vision and inspires motivation, engaging the team or team process to resolve problems or differences. Is aware of how management style impacts staff productivity and development, modifying leadership style to meet situational requirements. Coaches, mentors and directs others to reach individual and team goals, delivering end-to-end business solutions in a collaborative and professional manner.
• Analysing - Analyses numerical data and all other sources of information, to break them into component parts, patterns and relationships; probes for further information or greater understanding of a problem; makes rational judgements from the available information and analysis; demonstrates an understanding of how one issue may be a part of a much larger system.
• Formulating strategies and concepts - Works strategically to realise organisational goals; sets and develops strategies; identifies, develops positive and compelling visions of the organisation’s future potential; takes account of a wide range of issues across, and related to, the organisation
• Strong technical aptitude with a passion and excitement for improving IT applications, new technologies and solutions and its range of possibilities to increase effectiveness within a functional area and derive value for?the?business. A positive technical expert who serves the team and shows an appreciation for the development of team skills.
• Decisive with strong problem-solving skills – Integrates multiple and complex data sources to apply sound judgment; applies retail insights and knowledge to manage the division in a competitive, volatile trading and shopper landscape.?
• Good business acumen and enterprising thinking, able to operate comfortably within business strategy, current trends and developments in the retail industry, whilst identifying and understanding key business and commercial issues impacting on and contributing to the success, profitability or improvement of the organization.
• Efficiently planning, organising and coordinating – Able to timeously and efficiently prioritise and execute multiple and competing demands in a fast-paced environment, whilst coordinating people to ensure best use of time and resources to manage deliverables and deadlines.
• Ability to work in a high-volume, high-pressured environment and deliver high productivity, organising, prioritising, and reordering workload, implementing change in a fast-moving environment.