Job Advert Summary\u00a0\u00a0 \u00a0<\/p>\n
\tTo actively protect the organisations information technology assets and infrastructure from external or internal threats and ensuring compliance with statutory and regulatory requirements regarding information security and privacy. Also, to ensure security controls are implemented and managed across the organisation and to improve the overall security posture while maintaining the integrity of the Sasria brand.<\/p>\n
Minimum Requirements\u00a0\u00a0 \u00a0<\/p>\n
Qualifications<\/p>\n
\tInformation Technology (IT) related bachelor\u2019s degree\/Diploma as recognized by SAQA.
\n\tCOBIT Mandatory
\n\tAny (1) of the IT security certifications is mandatory\u00a0
\n\te.g:\u00a0
\n\tCompTIA Security
\n\tCISCO certified
\n\tFortinet certified
\n\tCISSP<\/p>\n
Experience<\/p>\n
\t6 years+ of Information and Technology security experience with advanced knowledge of the following technology environments: DarktraceTechnology, Fortinet Firewalls Zscaler Technology, Mimecast, Crowd strike and familiarity with industry SIEM solutions<\/p>\n
Duties and Responsibilities\u00a0\u00a0 \u00a0<\/p>\n
\tNot limited to;<\/p>\n
Cybersecurity program\u00a0<\/p>\n
\tUnderstand Sasria\u2019s strategy and the cybersecurity implications to enable digital trust within Sasria\u2019s operations and platforms.
\n\tDesign, configure, deploy, and maintain security controls to safeguard Sasria\u2019s infrastructure.
\n\tActively protect the organization\u2019s information technology assets and infrastructure from external or internal threats and ensure compliance with statutory and regulatory requirements regarding information access, security, and privacy.
\n\tAnalyse problems, and recommend solutions, products, and technologies to meet business security and information security objectives.
\n\tData Protection and Encryption
\n\tUnderstand organizational information data flow and maintain an inventory of data to ensure sensitive information is identified and protected adequately.
\n\tUnderstand data classification framework and implement controls as per sensitivity levels.
\n\tEnsure protection of data with advanced data encryption, data masking, or tokenization, to protect data across applications, transactions, storage, and big data platforms, on endpoints, servers, databases, and cloud environments.
\n\tDevelop or install software, such as data encryption programs for data at rest, in transit, and in use such as SSL certificates to protect sensitive information.<\/p>\n
Network, Web and Endpoint Security and Monitoring\u00a0<\/p>\n
\tBuild, maintain and upgrade security technology, such as firewalls, web application firewalls; network access controls; web security controls; endpoint security controls for the safe use of computer networks, and the transmission and retrieval of information during business operations.
\n\tMaintain the malware and destructive activities policy rules across security platforms to ensure business continuity while security is maintained.
\n\tCoordinate monitoring of networks or systems for security breaches or intrusions across Cloud and On-premises platforms.
\n\tEnsure endpoint security controls have covered the whole Sasria landscape and remain effective in identifying and mitigating threats in line with the in-depth layered defense approach.<\/p>\n
Threat and Vulnerability management<\/p>\n
\tLead threat landscape assessment and situational Cyber-attack Vulnerability awareness through an understanding of the vulnerability Detection, Management management program.
\n\tEnsure vulnerability assessments and penetration tests are performed periodically.
\n\tAnalyse, and interpret vulnerability results and facilitate Protection, and Response Maturity levels remediation of identified vulnerabilities in conjunction with other IT departments, and business applications owners.<\/p>\n
Physical security<\/p>\n
\tSupport facilities with the implementation of physical security measures designed to deny unauthorized access to Sasria premises.
\n\tEnsure robust and fit-for-purpose access controls, surveillance cameras, and intrusion systems.
\n\tEnsure advanced controls are in place for high-risk areas such as data centers and computer storage areas.\u00a0<\/p>\n
Disaster Recovery and Business Continuity\u00a0<\/p>\n
\tSupport the development of disaster response and recovery strategies within Sasria.
\n\tEnsure seamless transition between Sasria and the disaster recovery site during security breaches or other business interruptions.
\n\tTroubleshoot security and network problems to maintain a fit-for-purpose DR site and business continuity – plans.\u00a0<\/p>\n
Incident Response and Third Line Support<\/p>\n
\tProvide second-line support to users with any Information Security related queries within the SLA period.
\n\tProvide technical support to computer users for installation and use of security products.
\n\tOversee and provide advanced support on open issues (e.g.,customer logged tickets, incidents, projects, etc.)
\n\tAssist in incident response for any breaches, intrusions, or theft.<\/p>\n
Ad hoc<\/p>\n
\tContinuously develop information security standards and best practices to respond to the changing environment.
\n\tFollow the Procurement processes to purchase and identify the right service providers for security services.
\n\tOversee Third-party service delivery in line with defined service level agreements.<\/p>\n
go to method of application \u00bb<\/p>\n
Apply via company website ( N \/ A ) or<\/p>\n
<\/p>\n","protected":false},"author":2,"featured_media":0,"template":"","meta":{"_promoted":"","_job_location":"","_application":"","_company_name":"Sasria","_company_website":"http:\/\/N%20\/%20A","_company_tagline":"Sasria is a public enterprise listed under schedule 3B of the Public Finance Management Act No 1 of 1999. We are a non-life insurance company that provides coverage for damage caused by special risks such as politically motivated malicious acts, riots, strikes, terrorism and public disorders. Our... read more journey began over 40 years ago, after becoming inspired by courageous young people who shaped the course of history for South Africans through a series of demonstrations and protests known as the 1976 Soweto Uprising. View our milestones.","_company_twitter":"","_company_video":"","_filled":0,"_featured":0,"_remote_position":0,"_job_salary":"","_job_salary_currency":"","_job_salary_unit":""},"job_listing_region":[11],"job-types":[12],"class_list":["post-22625","job_listing","type-job_listing","status-expired","hentry","job_listing_region-gauteng","job-type-full-time"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/jobs.dataaxisnode.com\/southafrica\/wp-json\/wp\/v2\/job-listings\/22625","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jobs.dataaxisnode.com\/southafrica\/wp-json\/wp\/v2\/job-listings"}],"about":[{"href":"https:\/\/jobs.dataaxisnode.com\/southafrica\/wp-json\/wp\/v2\/types\/job_listing"}],"author":[{"embeddable":true,"href":"https:\/\/jobs.dataaxisnode.com\/southafrica\/wp-json\/wp\/v2\/users\/2"}],"wp:attachment":[{"href":"https:\/\/jobs.dataaxisnode.com\/southafrica\/wp-json\/wp\/v2\/media?parent=22625"}],"wp:term":[{"taxonomy":"job_listing_region","embeddable":true,"href":"https:\/\/jobs.dataaxisnode.com\/southafrica\/wp-json\/wp\/v2\/job_listing_region?post=22625"},{"taxonomy":"job_listing_type","embeddable":true,"href":"https:\/\/jobs.dataaxisnode.com\/southafrica\/wp-json\/wp\/v2\/job-types?post=22625"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}