Manager, IT Security Defence Permanent

Responsibilities :

Infrastructure Assessment :

Perform Infrastructure Risk, Infrastructure Security Requirements Assessment, Perform Infrastructure Gap Assessment & Review, Governance of Infrastructure Onboarding, Hardening & Data Protection;

Vendor Management :

Governance of Scorecard Management, Outsourcing Security, Infrastructure Supply Chain Management, conduct Outsourcing Gap Assessment;

Infrastructure Security & Compliance :

Conduct Infrastructure Security Program; Manage Key Control and Data Loss Prevention Committee; Audit/TRM/Head Office Liaison; Conduct Security Awareness and Training and Security Phishing Exercise

Requirements

• A good degree with at least 5 years’ relevant experience in IT Security Compliance;
• Strong understanding of IT security concepts & best practices;
• Knowledge of the cyber threat landscape to include Advanced Persistent Threats, Cyber Crime, Hacktivism; specifically, the tactics, techniques and procedures how a cyber-threat attack is done;
• Knowledge and understanding of attack method types and their usage in targeted attacks such as phishing, malware implantation, perimeter vulnerabilities and application vulnerabilities;
• Keeping up with the latest systems development lifecycle to ensure security features are fully assessed and tested before going live;
• Experience with execution of assessments and evaluations of cyber drills & exercises to include the development of strategic vision roadmaps, baseline or gap evaluations;
• Experience developing content-rich final reports and associated deliverables with results of subject matter expert analysis and improvement recommendations;
• Experience with certification & audit processes and extensive knowledge of best practices regarding systems compliance;
• Experience in application security will be an added advantage;
• Good communication skills and experience working in a collaborative environment.