Job Description

Key purpose:

To ensure that the design of IT security architecture as well as appropriate security controls are in line with FRG policies, processes, standards and procedures. The incumbent will also ensure that proper and adequate IT technology and tools are in place to enforce these controls.

Duties and responsibilities:

• Increase operational efficiency and suggest solutions to enhance cost effectiveness.
• Deliver exceptional service that exceeds customers expectations through proactive, innovative and appropriate assessments and consultation.
• Cultivate and manage objective working relationships with a variety of stakeholders, including end-users, SMEs, project managers and senior staff members by providing expert advice and consulting on all aspects of IT security.
• Represent Information Security in the business area under control at various IT Architecture and or Security committees and forums within company.
• Support with the aligning to and the implementation of an appropriate security operational strategy for the organisation by ensuring that IT Security standards are not only understood but owned by management and employees and ensure that appropriate standards are established and complied with.
• Comply, understand and all steps for the IT Information Security Processes and Procedures and meet governance in terms of legislative and audit requirements and provide consultation to business with regard to this.
• Identification, management and of information security risks within company by assisting in identifying, defining and maintaining the information security policy and functional standards for company.
• Support with implementing control mechanisms, which enables Information Security Service to have a view of the status of information security within company.
• Report on mitigating actions required to correct or remedy actions where necessary and inform company Governance structures or Business Units of any significant changes and risk situations.
• Consult to projects in terms of identifying risks, vulnerabilities and controls for new developments by researching and understanding security best practices and implementation of security products in a corporate environment.
• Perform Security Assessments on internal environments or external 3rd party environments, with the purpose of identifying shortcomings which introduce risk
• Manage own development to increase own competencies.
• Maintain current knowledge of the Information Systems security industry's emerging technologies.

Qualifications and experience:

• Degree or Diploma
• 5-6 years relevant ICT experience with specific experience in IT Security. The experience should ideally span multiple domains ranging from platform / database to network.
• A good understanding of networking and associated security vulnerabilities/security controls is essential.