Gauteng: Cyber Security Lead posted by Recruit-It

Summary of role:
This role is accountable for the detection, response and recovery services related to Cyber Security. It is a temporary role which will hand over to the final permanent candidate that will be in place by the end of this contract. The individual would need to manage cyber related threats (actual or perceived), as well as be able to build and sustain a team that addresses these threats through the lifecycle. The individual will be responsible for threat intelligence, incident management, identity and access management, incident response, advanced threat detection, application security and cyber security assurance.
 
Responsibilities:

• Primarily responsible for security event monitoring, management, and response
• Ensure incident identification, assessment, quantification, reporting, communication, mitigation, and monitoring
• Ensure compliance to SLA and process adherence to achieve operational objectives across all service partners appointed.
• Revise and develop processes to strengthen the current Security Operations Framework, review policies and highlight the challenges in managing SLAs.
• Responsible for team and vendor management, overall use of resources and initiation of corrective action where required for the Security Operations Centre (SOC).
• Management, administration and maintenance of security devices.
• Perform threat management, threat modelling, identify threat vectors and develop use cases for security monitoring.
• Perform proficient threat analysis determination.
• Responsible for integration of standard and non-standard logs in SIEM.
• Creation of reports, dashboards, metrics for presentation to stakeholders covering all security operations domains.
• Ensure that IT audits are effectively managed and coordinated across all auditors and key stakeholders.
• Partner, build and maintain positive working relationships with stakeholders.
• Plays a lead role on Project Savvy.
• Defines and releases security awareness as required across the Group.
• Protecting the cloud environment and ensuring that configurations are set up.

 
Qualifications

• Matric and a Tertiary degree
• 10-15 years’ experience in leading cyber security operations
• Relevant finance/internal audit qualifications
• Proficient in Incident Management and Response
• Experience in security device management and SIEM
• Experience in threat management
• Knowledge of various operating systems, including but not limited to Windows, Linux, Mac OS.
• Excellent stakeholder management, communication, and leadership skills.
• Ability to manage multiple priorities and drive alignment across diverse teams
• Technical capability – Proficient in cyber security controls, assessments and third-party management.
• People management – Ability to effectively manage performance and guide the team.
• Integrity and Ethics – Display high levels of integrity and trust as well as exercise professional judgment objectively and independently.
• Communication – Ability to demonstrate excellent communication skills – both oral and written.
• Innovation – Ability to actively pursue innovative solutions to the cyber security team and business. Provide input into the future strategic direction of cyber security.