Senior Specialist: EUC Information System Security Operations at SITA SOC (Ltd)

Key Responsibility Areas 

• Experience in Firewalls. 
• Perform ongoing monitoring of information systems and assess threats and risks to information security; 
• Coordinate security awareness and training programs to increase employees ' overall understanding, reaction time and the ability to envisage the company's potential safety and compliance requirements 
• Perform compliance assessments and vulnerability assessments to ensure government and citizen information is secure 
• Attend to all logged security incidents 
• Collaborate and partner with internal business representatives to recommend appropriate products so that the solutions are developed with relevant security system design specifications 
• Execute activities related to the implementation, and maintenance of information security controls and services aligned to the cyber security framework, policies, standards and procedures 
• Management and Administration.  

Qualifications and Experience 

• Required Qualification: 3-year National Diploma / Degree in Computer Science or Information Technology or a relevant discipline verified / certified @ NQF level 6 qualification. Certified information system security professional (CISSP) or Certified Information Security Management (CISM) or Microsoft Azure Security Technologies
• Added advantage: Certifications: ITIL foundation and COBIT 5 Introduction. 
• Experience: 6-7 years Information and Communication Technology (ICT) Infrastructure or Information Security (IS) or application life cycle management which should include the following: Working knowledge of information technology security risk management; Exposure to enterprise architecture frameworks (e.g. TOGAF; GWEA; MIOS); knowledge of governance processes and standards (e.g. ISO 27001/27002; COBIT; ITIL); Exposure to information system security technical standards (e.g.: SSL certificates, anti-virus protection, firewalls, SCCM, Intune etc); Experienced in (e.g. Service Management, Converge Communication, Risk Management, Information Technology, Applications, etc.).