(780) Cyber Security Specialist - Cloud - BSTD

(780) Cyber Security Specialist - Cloud - BSTD

The main purpose of this position is to research, design, develop, implement and mature technologies and solutions related to Cyber Security Operations (CSO) within the Business Solutions and Technology Department of the South African Reserve Bank (SARB).

Detailed description

The successful candidate will be responsible for the following key performance areas:

• Provide technical expertise as input into cloud security capabilities and appropriate controls for departmental/SARB Group projects to contribute towards business objectives.
• Provide operational and management support through effective reporting and dashboard creation where relevant.
• Design and deploy industry-aligned cloud security solutions to meet business requirements.
• Use and maintain cloud security technologies to identify potential security issues across technologies, solutions and applications within the SARB Group.
• Respond to minor security breaches by implementing operational countermeasures, including making technical configuration changes.
• Support the investigation and containment of major incidents using advanced information.
• Innovate, design and implement opportunities for improvements/enhancements, integration, consolidation and automation to ensure cost-effective and optimal use of CSO technology and resources in support of protecting business solutions.
• Research and keep abreast of new and changing cloud and cybersecurity technologies and architectures.
• Scan the external threat landscape and identify vulnerabilities within SARB Group solutions and assist solution owners with remediation activities relating to ever-evolving cyber threats.
• Provide technical input into addressing audit findings, penetration tests, threat intelligence-based ethical red teaming (TIBER) and other risk assessments.
• Work closely with the governance teams to develop policies, standards and a Group Cybersecurity Strategy.
• Attend to service and incident requests and ensure the resolution thereof within agreed service level standards.

Job requirements

To be considered for this position, candidates must be in possession of:

• a minimum of a Bachelor’s degree in Information Technology (IT) (NQF 7) or an equivalent qualification;
• relevant cybersecurity certifications such as CompTIA CASP+; and
• a minimum of 5-7 years of job-related experience in a security operations environment and related systems (e.g. Active Directory; Cloud Access Security Broker; database activity monitoring; endpoint detection and response; security information and event management; security orchestration, automation and response; vulnerability assessment; scanners; Azure; and Entera).

The following will be an added advantage:

• technology-specific cybersecurity certifications.

Additional requirements include:

• industry, organisational and business awareness;
• quality assurance knowledge and skills;
• the ability to take a forensic approach to challenges;
• continued improvement, learning and/or professional development skills;
• knowledge in Active Directory; Cloud Access Security Broker; database activity monitoring; endpoint detection and response; security information and event management; security orchestration, automation and response; vulnerability assessment; scanners; Azure; and Entera;
• networking security knowledge;
• the ability to use logic and reasoning to identify the strengths and weaknesses of IT systems from a cybersecurity perspective;
• testing knowledge;
• operations knowledge;
• analytical and problem-solving skills;
• judgement and decision-making skills;
• a drive for results;
• learning focus;
• team focus;
• planning and organisational skills;
• service and stakeholder focus; and
• the ability to build and maintain relationships.

In line with the SARB’s commitment to diversifying its workforce, preference will be given to suitable candidates from designated groups. People with disabilities are welcome to apply.

The SARB offers remuneration and benefits commensurate with the level of the position and in line with the market. The level at which the successful applicant will be appointed will depend on his/her competence and experience.