Job Description

1. Cybersecurity Operations & Incident Response

• Analyse vulnerability management performance and identify remediation SLA breaches.
• Review endpoint security coverage and health (EDR, DLP, Antivirus).
• Assess configuration compliance against Gold Images and CIS benchmarks.
• Review SOC monitoring, alert handling, incident escalation, and SLA adherence.
• Review and challenge incident response handling and root cause analysis for security control failures.

1. Network & Asset Management

• Validate asset inventories by reconciling CMDB data with active network discovery.
• Review network segmentation and firewall rules for flat network risks and overly permissive access.

1. Governance, Risk & Compliance

• Support CyberTrust Mark readiness through gap assessment and remediation tracking.
• Validate network security controls against CSA 19 requirements.
• Perform independent 2LOD validation of control design, effectiveness, and remediation closure.
• Contribute to security architecture and governance reviews (governance led separately).
• Support audits through technical evidence preparation and control walkthroughs.

Qualifications

[ Please copy from Word Pad instead of Word Document ]