Group Information Security Consultant (GRC) (CPT Onsite)

ENVIRONMENT:

ENSURE that all security-related services are functional to all sites, conduct regular internal compliance checks within the Group of a dynamic Consultancy in Cape Town seeking to fill the role of a Group Information Security Consultant (GRC). You will also ensure the Group achieves and maintains PCI DSS, ISO2700K, ISMS and corporate compliance and support the Group Information Security team. The ideal candidate will require a suitable tertiary qualification or equivalent with relevant working experience of at least 5 years’ experience in a similar role preferable in a global company. You will also need proven experience in working within a process-driven environment and in distributed Patch Management systems, knowledge in security management tools and applications, have a solid understanding of IT & Security Enterprise Architecture. You must be willing to work occasionally out of business hours due to project or incident-related issues.

DUTIES:

• Assist the Head of Information Security in maintaining and enforcing the corporate security best practices & strategy across all locations.
• Maintain information security standards and procedures in compliance with agreed corporate Information Security and Risk Management policies, standards and guidelines.
• Responsible for the maintenance and support of security controls and user profiles as required by the functional teams.
• Participate in the operational security processes (application assessments, product certification, network connectivity to all relevant peers, address group security helpdesk incidents).
• Reports on defined IT / Business privacy and security metrics.
• Participate in Business Continuity and Disaster Recovery planning, providing security, availability, integrity, and confidentiality.
• Ensure that any/all information technology systems and services remain compliant with policy and regulatory requirements.
• Ensure proper firewall Change Management and logging procedure are adhered to.
• Ensure that all security related monitoring, scanning and patching policies are observed and enforced.
• Make recommendations based on reports and observations to take remedial action and/or implement best practice improvements in line with Security Policies.
• Provide ongoing support and recommendations to the Head of Information Security.
• Provide ad-hoc support to local IT teams and Group IT Ops.
• Other duties as determined by the Head of Information Security.

• Tertiary qualification or equivalent with relevant working experience.
• Minimum 5 years’ experience in a similar role preferable in a global company
• Proven experience in working within a process-driven environment.
• Proven experience in distributed Patch Management systems, knowledge in security management tools and applications.
• Well-developed understanding of IT & Security Enterprise Architecture.
• Willing to work occasionally out of business hours due to project or incident related issues.

• Proven experience in –
• Managing, maintaining and implementing NGFWs; knowledge of Fortinet and Palo Alto.
• Enterprise controlled EDR/XDR applications; knowledge Cortex XDR.
• Vulnerability and SIEM products and applications; knowledge of Rapid7 product suites.
  
  • Preferable management in Information Technology or Information Technology Auditing.
  • Experience in maintaining and configuring next-generation firewalls.
  • Well-developed knowledge Network Analysing tools such as Wireshark.
  • Developed understanding of the ITIL Service Delivery Model.
  • Internal or external IT Auditing experience.
  • CISM/CISA or other Certification in IT Security systems.
  • CCNA, CCNP or other Certification in Networking area.
  • Knowledge of Information Security and PCI DSS Compliance.
  • Proficiency in German language would be an advantage (written and verbal).
  
  

• Well-developed problem-solving skills and ability to work in a fast-paced and changing environment.
• Excellent written and verbal communication skills.
• Highly developed planning and organizational skills.
• Flexible, self-motivated and proactive.
• An ability to implement processes and procedures as defined by management.
• Strong proficiency in English language (written and verbal).

Desired Skills:

• Group
• Information
• Security