{"id":3654312,"url":"https://alion.io/job/jse-senior-information-security-specialist","title":"Senior Information Security Specialist","company":{"id":1913063,"name":"Johannesburg Stock Exchange","domain":"jse.co.za","url":"https://alion.io/company/jse-co-za","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Sandton, South Africa"],"countries":["ZA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"John the Ripper","optional":false},{"name":"Kali Linux","optional":false},{"name":"Linux","optional":false},{"name":"Metasploit","optional":false},{"name":"Nessus","optional":false},{"name":"Nmap","optional":false},{"name":"OpenVAS","optional":false},{"name":"Outlook","optional":false},{"name":"OWASP","optional":false},{"name":"Unix","optional":false},{"name":"VMWare","optional":false},{"name":"Waterfall","optional":false},{"name":"Wireshark","optional":false}],"status":"live","first_seen_at":"2026-10-30T14:08:55Z","employer_posted_date":null,"last_verified_at":"2026-10-30T14:08:55Z","board_verified":false,"closed_at":null,"days_open":11,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":11},"description":"Introduction\nThe Johannesburg Stock Exchange (JSE) is seeking a highly experienced Senior Information Security Specialist to join our Information Technology team. This role is responsible for driving Information Security Assurance services across the JSE technology landscape, ensuring the confidentiality, integrity, and availability of critical systems and data.\nAs a subject matter expert, you will play a pivotal role in designing, implementing, monitoring, and evolving security controls across on-premises and cloud environments while ensuring compliance with industry standards and regulatory requirements.\nDuties & Responsibilities\nInformation Security Assurance & Risk Management\nIdentify, assess, report on, and mitigate security risks across applications, infrastructure, and cloud environments.\nConduct security risk assessments, audits, vulnerability assessments, and penetration testing activities.\nDrive the remediation of security vulnerabilities in line with established vulnerability management processes.\nInvestigate security incidents, perform root cause analysis, and support forensic investigations.\nDevelop and implement security metrics and reporting frameworks for senior management.\nSecurity Architecture & Governance\nProvide specialist security input into enterprise architecture, solution design, and technology adoption initiatives.\nEnsure security principles are embedded throughout the Software Development Lifecycle (SDLC).\nReview architecture designs and recommend appropriate security controls and enhancements.\nContribute to the development and maintenance of security policies, standards, and procedures.\nCompliance & Regulatory Assurance\nSupport regulatory and compliance audits.\nDrive remediation activities resulting from audit findings.\nEnsure alignment with industry and regulatory frameworks, including:\nPOPIA\nCyber Crimes Act\nSWIFT\nNIST\nISO Standards\nOWASP\nCIS Controls\nCloud Security Alliance (CSA)\nStakeholder & Vendor Management\nPartner with Information Security leadership, Enterprise Architects, IT teams, and business stakeholders.\nManage relationships with security technology vendors and service providers.\nEngage with industry forums and security communities to stay ahead of emerging threats.\nSecurity Operations & Continuous Improvement\nProvide Level 3 security support across the organisation.\nMonitor and maintain security technologies and controls.\nLead and contribute to security projects and strategic initiatives.\nMentor and support junior security professionals.\nStay current with emerging cybersecurity threats, technologies, and best practices.\n\nDesired Experience & Qualification\nQualifications\nDegree in Information Systems, Information Security, Computer Science, or a related field.\nOne or more of the following certifications:\nCISSP\nCISM\nCISA\nCRISC\nLicensed Penetration Tester (LPT)\nRelevant F5 Certifications (101, 201, 301, 302, 303, 304)\nCisco Security Certifications (including FireSIGHT IPS)\nAdvantageous Certifications\nCertified Ethical Hacker (CEH)\nApplication Penetration Testing Certifications\nNetwork Security Administrator (NSA)\nCertified Application Security Tester\nExperience\nMinimum 10 years' IT experience.\nMinimum 7 years' experience in an Information Security Specialist role.\nProven experience across enterprise security operations, governance, risk management, and security architecture.\nKnowledge:\nSoftware applications (e.g., Outlook, Word, Excel, Access, Internet, Email)\nKnowledge in Microsoft Visio (Process flows)\nPenetration testing principals and methodologies\nPenetration testing techniques and tools (Burp, Metasploit, Wireshark, John the Ripper, Cain & Abel, Kali, Nmap)\nSoftware Development Lifecycle (Agile Adaptive & Waterfall Predictive)\nIntermediate programming knowledge\nIntermediate database knowledge\nDiagnostics/Troubleshooting for application, database & hardware\nAdvanced Knowledge in Vulnerability Management process\nAdvanced Knowledge in Vulnerability Management tools (Nessus, Rapid7, OpenVAS)\nTechnology Products/Platforms and Solutions (Microsoft, Linux/Unix, VMWare)\nAdvanced knowledge in various operational security controls\nAdvanced knowledge in Networking Principles\nAdvanced Knowledge in Industry standard Security principles\nKnowledge of Industry standards (ISO, NIST, OWASP, CIS, CSA)\nKnowledge of JSE specific regulatory standards and requirements (POPIA, SWIFT, Joint Standards Framework, Cyber Crimes Act)\nKnowledge in Industry standard Security design principles\nInformation security principles in the enterprise architecture frameworks\nCloud technologies (Azure and AWS) architecture and security\nData Loss principles and data loss technologies\nEncryption principles, standards and technologies\nOperational security controls","description_format":"text","description_chars":4751,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-11-03T00:58:31Z"}],"visa":[],"liveness":{"score":77,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.852,"p_room":0.9,"age_days":11,"expected_fill_days":29,"reasons":["seen:11","win:mid"],"computed_at":"2026-11-11T05:49:22Z"},"pay":null,"html_url":"https://alion.io/job/jse-senior-information-security-specialist","json_url":"https://alion.io/job/jse-senior-information-security-specialist.json","meta":{"generated_at":"2026-11-11T12:44:19Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":22850,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1913063},"rest":"https://alion.io/mcp/rest/get_company?id=1913063"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fjse-senior-information-security-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fjse-senior-information-security-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fjse-senior-information-security-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/jse-senior-information-security-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fjse-senior-information-security-specialist"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3654312}},{"tool":"search_jobs","arguments":{"company":"jse.co.za","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3654312},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}