Information Security Specialist (24 MONTH CONTRACT)

The purpose of the job is to plan, manage, and administer the CMS network security. Ensure all network components are managed in accordance with approved guidelines and processes to ensure compliance. As an Information Security Specialist, you will be responsible for:

Designing, installing, and managing security mechanisms that protect the CMS network and information systems against breaches, viruses, and anti-spyware.

Upgrading systems by implementing and maintaining security controls.

Protecting the system by defining access privileges, control structures, and resources.

Developing and implementing standardised Information Security processes and procedures.

Responding to internal and external audit findings timeously.

Conducting IT risk assessments and group policy management.

Assisting with Penetration testing and vulnerability assessments.

Driving vulnerability management, security hardening, and remediation programmes or projects.

Remediate cloud security findings, vulnerabilities, and penetration test results.

Ensuring Endpoint protection (Antivirus Software) is always managed and configured properly.

Ensuring Information System compliance and conformance to IT policies and processes.

Ensuring that systems and procedures follow industry standards, e.g., ISO 27000 - 27004.

Liaising with all departments and IT users to ensure compliance and correction of all IT security issues.

Research, plan, and implement information security technical solutions to meet business requirements.

Proactively monitor, investigate, and report on information security incidents, Internet use, and ICT policy breaches.

Carry out assignments and tasks delegated by line and senior management in line with CMS’ operational requirements.

National Diploma in Information Technology or a relevant equivalent qualification at NQF level 6.

A minimum of five (5) years’ experience in IT governance and security.

Certifications in ITIL Foundation, Security+, CISM, CISSP, SCCM, and COBIT will be an added advantage.

Knowledge of Patch management, antivirus, vulnerability management, and Intune management.

Knowledge of penetration testing.

Knowledge of Active Directory, Azure, and Cisco Meraki.

Knowledge of Group Policy Management and Firewalls (Checkpoint, Sophos).

Knowledge of Mimecast, Azure Active Directory, and Cloud Security.

Knowledge of ManageEngine products (Desktop Central, Log 360, Ops Manager).

Proficiency in TCP/IP/Routers/Switches/Firewalls.

Server operating systems and security.

Analytical and problem-solving skills.

Project Management, presentation, and report writing.Customer-centricity, communication, interpersonal, and emotional Intelligence.