Our Client:
One of the leading universities in South Africa has an exciting vacancy for a Senior Manager in Information & Cyber Security. Taking advantage of expanding global networks and their distinct vantage point in Africa, they are committed, through innovative research and scholarship, to grapple with the key issues of our natural and social worlds.
What they can offer you:
- Flexible Working conditions;
- Relocation Assistance;
- 100% discount on education for the staff member & 90% for direct family members;
- Structured package to benefit your bottom line;
Salary:
The annual remuneration package, including benefits, is negotiable between R1,137 499 and R1,338 233 depending on experience and qualifications. Hybrid work arrangements can be negotiated.
About the role:
The Enterprise Infrastructure Services Division seeks to appoint a Senior Manager to lead the Information Security Team while retaining the responsibility for the practical application of cyber operations. This role will suit candidates that are self-motivated, proactive, that can work under pressure and who have demonstrated experience in stakeholder management and who can lead a team of security analysts through the effective identification, response, and recovery process for cyber incidents.
Requirements for the job:
- Relevant qualification at NQF level 7 (e.g. Degree in Computer Science, Information Systems (information and/or security domain as major) or similar);
- Advanced certifications such as CISM, CISSP or CASP which are current;
- 10 years experience in Information technology (Enterprise infrastructure);
- A minimum of 5 years in an information and cyber security role - 3 years must be experience in a senior management role at team management level or higher;
- Demonstrated experience and understanding of project and program management.
Technical requirements for the job:
- Hands-on experience and proficiency in analysing high volumes of logs, network data (e.g., NetFlow, FPC), and other attack artifacts in support of incident investigations;
- Expert in incident handling and digital forensic processes;
- Knowledge of Data Loss Prevention, Data Replication, and Disaster Recovery Systems;
- A deep understanding of Technology Security risks and mitigating solutions;
- Strong knowledge ISO27001/2 Cybersecurity Framework;
- Knowledge of legal, regulatory, and privacy requirements;
- Knowledge of Centre of Internet Security Standard (CIS), COBIT 2019 and NIST frameworks;
- Proficiency in three or more of the following: Anti-Virus, IDS/IPS, Full Packet Capture, Host Based Forensics, and/or PKI;
- In-depth knowledge of architecture, engineering, operations, use case definition and playbook automation in at least one enterprise SIEM platform (e.g., SIEMonster, QRadar, Splunk);
- Demonstrable knowledge of and experience in two or more of the following: network security, computer security (Windows, Mac, and Linux), application security, and cloud security.
Non-Technical requirements for the job:
- Proven ability to work under stress in emergencies, with the flexibility to handle multiple high- pressure situations simultaneously;
- Excellent written and verbal communication skills with the ability to form effective working relationships with other staff and stakeholders;
- Confidence communicating technical cyber security risks, incidents and threats to non-technical staff and stakeholders;
- Determination and tenacity to drive service and security improvements across the business and the ability to assess the effectiveness of control measures and make improvement suggestions;
- Ability to work well under minimal supervision;
- Analytical thinking and problem-solving skills;
- Attention to detail when delivering technical documentation, policies, and procedures.
About you:
- Experience leading and managing operational information and cyber security service delivery and experience working in cyber security operations;
- Proven experience acting as the escalation point for all security incidents that require attention and timely responses;
- Effectively manage security incidents, ensuring the appropriate process is followed from start to finish e.g., coordinate response, triage and escalation of security events affecting information assets and activities within a Computer Incident Response team;
- Experience in reviewing, & defining new SIEM use cases; run books that provide guidelines for analysing and responding to specific threats related to the new use case;
- Looking to take your cyber security skillset to the next level, leading and developing others;
- In possession of excellent interpersonal skills, with the ability to communicate with staff at all levels;
- Build effective working relationships with internal and external stakeholders.