IT Security Governance and Compliance Specialist

SUMMARY:
Employment equity candidates will be given priority.

POSITION INFO:

Objective:

• Develop, enhance and implement enterprise-wide security policies, procedures and standards to meet compliance responsibilities.
• Define security configuration and operations standards for security systems and applications, including network security appliances, and host-based security systems. 
• Define, recommend and manage security controls for information systems. Identify security risks and manage to resolution. 
• Provide security support for application- and infrastructure-related projects to ensure that security issues are addressed throughout the project life cycle. 
• Provide governance over the management of internal and external Security controls to minimise risk.
• Facilitate continuous improvement of Security maturity across the organization.

Minimum Requirements

• Degree in Computer Science, Information Technology, Computer Auditing or Internal Auditing.
• CISA, CISSP, CISM, CRISC qualification preferable.
• At least 5+ years of experience working in professional information security role.
• Broad information security knowledge across several security domains.
• Experience in developing the appropriate information security governance and compliance measures.
• Experience in managing and developing baseline information security configurations and experience with common industry information security standards and guidelines (such as CIS Controls)
• Experience of identifying risks and developing and implementing policies, procedures and processes.
• Experience of process development and process improvement.
• Knowledge and experience with various Information Security governance and control frameworks (NIST, ISO27001/2, PCI-DSS, CIS Controls).
• Knowledge of security architecture, network security, access control and user access management, encryption, application security, platform security and database security.
• Experience working with SIEM tools (McAfee ESM) and able to identify tuning recommendations for improved detection and accuracy.

Key Performance Indicators

• Security Governance
• Security Compliance Management
• Project Management
• Treating Customers Fairly and Compliance
• IT Security & Governance Research
• Continuous Improvement

NB! This job is now closed. You can apply for other jobs by uploading your CV.