{"id":1871142,"url":"https://alion.io/job/sbv-services-information-security-analyst-l2","title":"Information Security Analyst L2","company":{"id":3894773,"name":"SBV Services","domain":"sbv.co.za","url":"https://alion.io/company/sbv-services","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"MCI DirectHire","truth_index":{"grade":"C","score":68,"open_postings":13,"ghost_share":0.538,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-10T05:45:15Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Johannesburg, South Africa"],"countries":["ZA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":30000,"max_usd":71000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":1824},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ISO 27001","optional":false},{"name":"Nessus","optional":false},{"name":"Nmap","optional":false},{"name":"SLI/SLO/SLA","optional":false}],"status":"live","first_seen_at":"2025-08-13T12:00:00Z","employer_posted_date":"2026-10-04","last_verified_at":"2026-10-12T02:36:10Z","board_verified":true,"closed_at":null,"days_open":424,"trust":{"level":"ghost","repost_count":0,"flags":["stale","company_stale"],"days_open":423},"description":"Description\nSupport Technology Transformation & Innovation in your area of responsibility\nSupport with developing and maintaining Cyber Security Road Map and interventions\nSupport with developing company-wide best practices for Technology security\nSupport improving the maturity, or efficiency, of the Cyber Security team, by identifying innovative, problem-solving solutions.\nCreates and maintain appropriate standard operating procedures for the Cyber Security and information protection.\nSupport on Analysis & Planning Activities\nIdentify, respond, predict and analyse security breaches and threats to determine their root cause and report findings to relevant stakeholders on cyber-security threats, attacks, incidents, and other factors that indicate security risks as per SLA.\nResearching, investigating and developing proficiency in current and emerging threats, vulnerabilities, and security technology developments.\nPlay an active role in Technology Security Planning sessions, driving agenda and deliverables with all participants.\nSupport managing Vendor Strategy and roadmap for Information Security\nEstablish plans and protocols to protect digital files and information systems against unauthorized access, modification and/or destruction within mandate\nAssessment of the organisation's technology risk exposure and measurement of the various parameters that make up technology risks.\nSupport the Design for your area of responsibility\nWork closely with other stakeholders to design, architect, consult and implement security solutions to ensure readiness for security technologies\nIn support of program design, gather client requirements and draft documentation in order to compile a draft project plan, only more complex programs need to be reviewed by the Information Security Officer\nIdentify the desired outcomes and success criteria which is to be the baseline for post project review and benefit realisation validation, as well as measuring positive effects.\nContribute to project risk management consulting and technical reviews, drafting mitigation plans and delivering on any actionable items allocated\nDrafts procedures and or policies with regards to cyber security submitting them to the Information Security Officer for review and authorisation.\nImplementation & Execution within mandate\nMonitor and analyse Cybersecurity operational services, including intrusion detection and prevention, situational awareness of:\no network intrusions.\no security events.\no data spillage; and.\no Incident response actions.\nIdentify and resolve vulnerabilities in networks, servers, systems, and applications by performing vulnerability scans.\nInvestigate improper access to ensure proper access; revoking access; reporting violations; monitoring information requests by new programming; recommending improvements including but not limited to privilege account management.\nProvide daily operational effectiveness reporting to the Information Security Officer\nCreate and update weekly dashboard view of cyber risk ratings in the organisation.\nPrepare reports for circulation to the management teams related to investigations and treats for the month, this will also be rolled up into quarterly reporting.\nSupport with managing vendor resource deliverables to ensure quality and consistency of services\nAudit vendor services and report on non-performance or execution deficiencies to the Information Security Officer\nRisk & Quality Management within one’s area of responsibility\nDrives vulnerability testing, risk analyses and security assessments providing findings to the Information Security Officer\nMaintain compliance with core risk management concepts, such as vulnerability management and threat intelligence.\nGuide teams throughout the organisation, imparting knowledge to enable employees to become Technology Security champions\nCreate a collaborative program to coordinate and drive operational activities related to Cyber Security, including event and incident investigation, process development and optimization, playbooks, and exercise development.\nAssists with managing vendor resource deliverables to ensure quality and consistency against SLA as per mandate\nTo be the point of contact that interface between vendors and business units during audits, assessments or security reviews as per mandate\nAdvise Technology business partners on regulatory, compliance (POPI, PAIA, etc) and/or legal requirements as it relates to securing of data.\nDrive compliance regarding Information Security business continuity planning.\nSubscribe and align to SBV Services' ISO 9001:2015 Quality Management Standards, ensuring the department’s processes and quality management system is at all times in compliance with the standard\nSupport SBVs ESG journey, reporting on and managing the ESG requirements to ensure a positive reflection and outcome.\nCreate awareness of IT Security good practices to the relevant stakeholders through communication and training\nFoster relationships within the organization in order to implement security interventions that are relevant to current business needs.\nWork across the organization to present contextual risk information to business colleagues, influencing strategic and operational decisions.\nLead and collaborate on lessons learned and root cause activities, including incident response processes until closure with all relevant stakeholders.\nDrive compliance with Cyber security Training, in conjunction with Organisational Development, and awareness including alerting and escalations of non-compliant staff\nDevelops security awareness by providing orientation, educational programs, and on-going communication.\nDevelop, document and distribute how-to guides and update the internal knowledge base\nAdhere to Process and Policy\nStrives for 0 data material breaches and findings in Audits\nDrives any audit findings departmentally providing regular feedback to the Information Security Officer\nManage internal control framework ensuring internal controls are reviewed periodically by departments as well as driving internal control adherence and compliance\nCreate and maintain appropriate standard operating procedures for Information Security, including business continuity plans.\nEstablishes system controls by developing a framework for controls and levels of access, recommending improvements.\nComply with established security configuration standards and best practices.\nDrive compliance of the audit framework\nMonitor and drive compliance against the audit framework. Logical access, physical access, change management, security controls (hardware, software and data levels). Implement additional processes, such as Segregation of Duties, Password Safes and Audit trails, to address the risk posed by privileged Technology users.\nConduct reviews and assessments according to policies and standards set out (across PM Lifecycle and SDLC).\nConduct internal and external security audits, providing recommendations to close any potential gaps within the process and or system\nConduct technical security reviews and perform technical risk assessments.\nSupport the SBV United Ethos\nAct as a coach or guide to new employees within the department, peers and others\nContribute to building a knowledge sharing culture within the department\nWhere applicable, take the opportunity to upskill oneself on future skill sets and other roles with the department/SBV\nLead as an Ambassador and executor of Change.\nAct as a change management architect in periods of change to ensure business continuity.\nManage the integration of business units into a seamless end to end solution for customers.\nEffectively communicate and embed new processes and procedures as they occur, addressing or escalating matters/ concerns to the SME’s (subject matter experts) when required.\nFacilitate the necessary presentations, workshops, or forums to ensure consistent and accurate communication is given across one’s portfolio.\nRequirements\n5 Years’ experience within either an Information Security position or Cybersecurity, which include protection against social engineering, or security vulnerability remediation, of which:\n2 Years’ IT administration experience\n2 Years’ Ethical Hacking experience\nIn-depth knowledge of Cloud security platform (MS Intune / O365 Security, etc.)\nIn-depth knowledge of Firewalls and Malicious Code Defense including APT\nKnowledge of Cybersecurity technical assessments, standards, tools, and processes\nKnowledge of common attack vectors\nKnowledge of Vulnerability assessment tools (Nessus, Nmap)\nEndpoint and network security tools/techniques\nRequirement: Education\nBachelor’s degree in Information Security or similar.\nIndustry certifications such as CISSP, SANS/GIAC: GSEC, GCIH, GFCA, GCFE, GCIA; EC-Council: CEH, ECIH, CHFI, ECSA; Security+; Tenable: TCNU, TCNA, TCSE, ISO27001 (Candidates with certifications will be given preferential reviews)\nNB: Communication will be limited to shortlisted candidates only.\nSBV recruitment is committed to transformation and diversity alignment","description_format":"text","description_chars":9038,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security"],"lifecycle":[{"event":"open","at":"2026-10-04T21:27:12Z"}],"visa":[],"liveness":{"score":5,"band":"cold","label":"Long shot","p_open":1,"p_active":0.194,"p_room":0.28,"age_days":422,"expected_fill_days":39,"reasons":["conf:1","stale_co","ghost","win:tail","crowd:"],"computed_at":"2026-10-10T05:45:15Z"},"pay":null,"html_url":"https://alion.io/job/sbv-services-information-security-analyst-l2","json_url":"https://alion.io/job/sbv-services-information-security-analyst-l2.json","meta":{"generated_at":"2026-10-12T04:09:45Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6606,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3894773},"rest":"https://alion.io/mcp/rest/get_company?id=3894773"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsbv-services-information-security-analyst-l2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsbv-services-information-security-analyst-l2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsbv-services-information-security-analyst-l2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sbv-services-information-security-analyst-l2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsbv-services-information-security-analyst-l2"}]}