Assistant Manager: Cyber Security

Assistant Manager: Cyber Security

Requirement Overview

To provide support to management in managing audit initiatives that promotes the secure, effective and efficient implementation of IT architectures and services within the government sector.

Roles and Responsibilities

Product

Participate in audit committee/steering committee meetings with Business Unit (BU) management as and when required.

Conduct Network security audits covering the three audit phases:

1. Planning
2. Execution
3. Reporting

Plan the network security audit:

1. Define the objectives of the audit.
2. Define the scope of the audit.
3. Identify benchmarks to be utilised.
4. Assess the risks from source documentation.
5. Compile the audit plan.
6. Conduct a walk through process with the relevant role players.

Execute tests, inclusive of:

1. Compliance to policies, procedures, standards and specifications.
2. Adequacy on goals.
3. Reliability of information.
4. Efficiency and effectiveness of operations.
5. Safeguarding of assets.
6. Internal and External vulnerability assessments.
7. Firewall and Router assessments.
8. Web application reviews.

Generate audit reports indicating:

1. Audit findings.
2. Recommendations.

Conduct a closure meeting, where appropriate, to discuss:

1. Accepted recommendations to be implemented and timelines applicable.
2. Rejected recommendations and internal actions to be implemented.
3. Target dates for implementation and review.

Supervise subordinates in the execution of the three audit phases.

Supervise team meetings regarding the direction and progress on the audits.

Provide guidance to auditors on audit related matters.

Conduct the field work in accordance with policies and procedures.

Communicate to Manager and Senior Manager on progress or obstacles during the audit.

Submit the audit report for publishing and archiving.

Finalise the audit file and submit for archiving in accordance with policies and procedures.

Provide support in the review of contract work and quality assurance.

Promote and manage sound internal controls within the Business Unit.

Keep abreast of the latest development at the AGSA.

Manage audits within the allocated time frame.

Manage audits in adherence to internal processes, policies and procedures.

Stakeholder Relationships

Maintain internal stakeholder relationships:

1. Participate in debriefing sessions with regularity audit on the previous year’s audits performed.
2. Engage with team members during the audit process.
3. Liaise with colleagues within the Business Unit.

Maintain external stakeholder relationships:

1. Liaise with audit firms.
2. Liaise with prospective employees.
3. Liaise with Auditees with regards to Audit requirements.

People Management

Monitor staff performance to implement a culture of performance management:

1. Participate in the compilation of IPC’s and PDP’s.
2. Conduct coaching sessions of staff members.
3. Provide constant feedback to subordinates.
4. Provide mentorship to subordinates.
5. Conduct performance reviews in accordance with policies and procedures and take corrective action where necessary.

Manage the development of staff and ensure each staff member has a Personal Development Plan.

Create a conducive environment to maintain and enhance employee motivation.

Participate in transformational initiatives inclusive of change, organisational culture, CSI, diversity, etc.

Continually improve own competence through personal development as per PDF and commitment:

1. Participate in learning and development programmes.
2. Participate on programmes for purposes of Continuous Professional Development (CPD).

Manage Human Resources in accordance with policies, procedures and legal requirements.

Complete Human Resource Management actions within the allocated time frames.

Budget Management

Support the Manager to ensure the delivery of high quality, accurate and cost effective audits through effective planning and resource management.

Ensure effective and efficient management of projects in terms of time, cost and quality.

Providing input to manager on:

1. Planning of audits under her/his control.
2. Budgeting requirements.
3. Organisational reporting needs.

Ensure that hours and expenses booked are in accordance with the allocated budget.

Achieve own recoverability target.

Manage budget in accordance with policies, procedures and legal requirements.

Complete budget management actions within the allocated time frames.

IT Effectiveness

Assist the Manager in maintaining industry, information technology and audit knowledge, skills and abilities relating to cyber security, cloud computing, enterprise mobility operating systems, network environments, applications and database management systems, programming languages, LAN / WAN communication concepts, and system development processes.

Monitor trends within the information technology and government sectors to identify emerging areas of risk facing government.

Assist the Manager with the coordination of the portfolio of IT effectiveness audits covering:

1. Value-for-money IT audits.
2. Effective and efficient deployment of IT infrastructure and services.
3. Compliance with ECT and Protection of personal information (PoPI) acts.

Ad-hoc duties

Perform and/or manage other projects, tasks and assignments not stipulated on the Job description as and when required.

Skills, Experience & Education

Formal Education

1. B Degree in Auditing, Computer Science, Informatics or equivalent.
2. CISA - Preferred.
3. CEH or equivalent - Preferred.

Knowledge

Knowledge of Auditing.

In-depth knowledge and skills in assessing/ auditing the security on a networked environment, i.e.:

1. Knowledge/ skills in assessing the management and technical configuration of various types of firewalls.
2. Knowledge of various types of vulnerability detection tools, how to use them to enumerate vulnerabilities, and how to interpret outputs using the respective tool.

Knowledge/ skills in assessing the security and configuration of various operating system and database types.

Knowledge and understanding of the principles of finance and the components involved in finance; must be able to apply PFMA and MFMA principles and adhere to due dates.

Experience

1. Minimum 4 - 5 years IS auditing experience.
2. Minimum of 1-2 years’ supervisory experience.

Closing Statement

These appointments are subject to the preferred candidates obtaining the necessary security clearance, reference checking and competency assessment. We embrace employment equity and are committed to achievement of fair and equal representation of our workforce. Preference will be given to internal applicants and candidates from previously disadvantaged backgrounds.

Auditor General welcomes applications from all persons with disabilities.

NB: Please note that only shortlisted candidates will be contacted. Should you not hear from us within four weeks, kindly consider your application unsuccessful.