Job Purpose:

• The purpose of the position is to manage and monitor information security (hardware, network, telecoms and software) and control access authorization to mitigate risk to the organization.

Job Outputs:

• Provide input to the IT security strategy and IT security enhancements.
• Assist with development of the IT security policy, procedures and standards.
• Implement, maintain and ensure adherence to information security framework and information security plan.
• Maintain appropriate security measures and mechanisms to guard against unauthorized access and protect against reasonably anticipated threats and hazards.
• Perform internal and external penetration testing.
• Conduct Network Security and Auditing on infrastructure.
• Ensure that vulnerabilities are resolved in a timely manner.
• Conduct trend analysis and testing.
• Ensure implementation of access management processes.
• Authorise and manage access to IT facilities and infrastructure.
• Investigate unauthorised access, compliance and performance of administrative duties relating to security management.
• Back-ups and Disaster recovery plans developed and implemented.
• Facilitating business awareness regarding IT security and current trends.

Qualifications:

• Relevant technology certification; Certified Ethical Hacker (CEH) or equivalent / Security analyst, penetration testing certification
• Certified ISO/IEC 27002

The following certifications are an advantage:

• Certified ISO/IEC 27001 Foundation
• ITIL Certification
• CCNA Security
• CCNP Security
• Valid Code 08 Driving licence

Experience:

• 3 years’ experience working with Active Directory
• 2-3 years’ experience in:
• Penetration Testing
• Vulnerability Assessments
• Network Security and Auditing
• Cisco Routers and Switches
• Cisco Firewalls
• VPN wireless
• Linux operating systems

Knowledge and Skills:

• Problem solving
• Planning and organizing skills
• Time management skills
• Ability to work independently