Information Security Specialist

ROLE DESCRIPTION : Information security specialists focus on keeping an organisation's data and IT infrastructure secure, which requires a diverse set of skills and responsibilities.

TASK AND RESPONSIBILITIES :

1. Conduct threat and risk analysis and analyse the business impact of new and existing systems and technologies to eliminate risk, performance, and capacity issues.
2. Implement vulnerability assessments and configure audits of operating systems, web servers, databases, and detect patterns, insecure features, and malicious activities in the infrastructure.
3. Perform research, testing, evaluating, and deployment of security technology and procedures.
4. Run diagnostics on any changes to data to verify any undetected breaches.
5. Develop custom systems for specialized security features and procedures for software systems, networks, data centres, and hardware.
6. Develop and implement information security standards, guidelines, and procedures.
7. Keep current with new intrusion methods and develop protection plans.
8. Have an in-depth understanding of vulnerabilities, management systems, and common security applications.
9. Conduct counteractive protocols and report incidents.
10. Offer customized risk ratings for vulnerabilities based on company policies and maintain IT security controls documentation.
11. Provide customized security assessments, implement security policies, design security training materials, organize training sessions, provide technical support, and communicate security policies and procedures.

FUNCTIONAL KNOWLEDGE : Contribute to strategy formulation & execution; business requirement analysis; Incident Management and Response; Business Threat Identification and Communication; Information Risk Assessment and Management; Regulatory and Legal Frameworks; Change Management and Change Risk; GRC and Security Standards, Policies and Practices; Information Risks within Systems and IT Architecture; Information Risks within people and processes; Infrastructure Risks to business delivery; Enterprise and Security Architecture; Operational Security Practices and Management; Information Security Awareness.

MINIMUM REQUIREMENTS:

• NQF 7 Bachelor's degree in Cybersecurity or a related area, such as computer science or related fields.
• 5 - 6 years or more practical experience in IT and Information Security Governance, of which must include at least 3 years in an active Information Risk management role.