Ct Security Engineer : Assurance Ict Security Department (Pretoria)

Be among the first applicants.

FSCA South Africa

Pretoria

ZAR 400 000 - 500 000

Be among the first applicants.

Yesterday

Job description

Job title : Ct Security Engineer : Assurance ICT Security Department (Pretoria)

Job Location : Gauteng, Pretoria
Deadline : March 18, 2025

Purpose Of The Job

The ICT Security Engineer: Assurance will play a critical role in safeguarding the organisation's information and cyber security posture.
This position is responsible for conducting security assurance activities, including maturity assessments, governance and policy reviews, and supply chain information security due diligence.
The engineer will also oversee identity governance and access management, including data security and system access management, ensuring that the organisation adheres to industry best practices and regulatory requirements.
The successful candidate will collaborate with various ICT stakeholders to improve security measures, mitigate risks, and encourage a culture of security awareness across the organisation.
The person appointed to this position will report to the Specialist: ICT Security.

Key Performance Areas

Coordinate the annual information and cyber security assurance, control self-assessments and security penetration testing.
Ensure that the identity governance and access administration (IAM) solution performs in line with the service level commitments.
Ensure that the data loss prevention (DLP) solution performs in line with the service level commitments.
Manage and maintain identity threat protection and intrusion prevention solutions, and ensure that they function optimally.
Prepare monthly reports on ICT security events, incidents, breaches and policy or process violations in line with the response plans (CSIRP and CMP).
Prepare monthly operational reports on ICT security and risks, for presentation at management committees.
Coordinate the review of ICT security policies, standards and procedures in line with industry frameworks.
Ensure that ICT security risk register and mitigation plans are updated quarterly or as required.
Coordinate the information requests for governance, assurance, audit and control assessments.

Other Key Competencies

The candidate must demonstrate the following skills and attributes: Good verbal and written communication skills, interpersonal skills, and must collaborate effectively with other team members. The candidate must be energetic, have the ability to learn new concepts fast, work independently and under pressure when it is required.
FSCA is committed towards increasing the representation of marginalised groups in line with its Employment Equity Plan. People with disabilities are encouraged to apply.
Please note that correspondence and communication will only be conducted with shortlisted candidates and that the FSCA reserves the right not to appoint if a suitable candidate is not identified.

Requirements

A diploma/degree or equivalent in Computer Science or Information Technology, and relevant information security certification such as ISO/IEC 27001 Lead Implementer, ISC2 SSCP or ISACA CISM are preferred.
A minimum of 3 years of experience in information security, with a focus on information or cyber security assurance, governance and security risk management are required.
Knowledge of industry regulations and frameworks including but not limited to the ECT Act, POPI Act, ISO/IEC27001, NIST CSF, COBIT and understanding of ICT security policies, standards and procedures advantageous.
Strong technical knowledge and experience with Linux based operating systems (i.e. Red Hat, CentOS or Debian based) is required.