SENIOR SPECIALIST: ICT SECURITY
Tipp Focus
- Pretoria, Gauteng
- Permanent
- Full-time
The Senior Specialist will be responsible for the development and implementation of the ICT Security and Cyber Security strategy. The design and implementation of on-going protection programs and solutions monitor and test those programs and develop measures for program compliance, related security and privacy policies. The person appointed to this position will report to the Chief Information Officer (CIO).
Requirements:
A Postgraduate Degree in Computer Science or Information Technology (IT), with at least 8 to 10 years’ experience in a combination of ICT security and cyber security – at least 4 years must be in a senior ICT leadership role. A Professional security management certification such as a Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), and Certified Information Systems Auditor (CISA) or other similar credentials, is desired. Knowledge and certification of common information security management frameworks, such as ISO 27001, ITIL, COBIT and NIST.
Key Performance Areas:
Develops, maintains and administers a sound ICT Security and Cyber security organisational plan; initiates improvements as necessary;
Provide strategic security guidance for ICT projects, including the evaluation and recommendation of technical controls;
Develop, maintain and publish up-to-date security policies, standards and guidelines, and oversee training and dissemination of security policies and practices;
Partner with senior client business leaders to integrate all ICT security and Cyber security plans with company’s information and reporting requirement; and
Management of staff and ensure high performance culture is created.
Other Key Competencies:
The candidate must demonstrate the following skills and attributes:Project management skills; Risk Management, financial/budget management, scheduling and resource management, ability to lead and motivate cross-functional, interdisciplinary teams to achieve tactical and strategic goals, familiarity with applicable legal and regulatory requirements, including but not limited to King III, PAIA, POPIA, ECT and high level of personal integrity, the ability to professionally handle confidential matters and show an appropriate level of judgment and maturity, the ability to guide and mentor members, transfer own knowledge, inspire and motivate members and manage diversity.