3 Information security analyst l2 Jobs and Work in Midrand Gauteng

Information Security Analyst L2
SBV Services (Pty) Ltd. —Houghton Estate, Gauteng
- Full-time
Information Security Analyst L1
SBV Services (Pty) Ltd. —Houghton Estate, Gauteng
- Full-time
Remote Systems Analyst (L2)
FusionTek —Midrand, Gauteng
- R300 000 - R350 000 a year
- Full-time
- Remote
Quick Apply
6h

Related jobs to explore

Based on your search for information security analyst l2

Information Security Analyst L2
SBV Services (Pty) Ltd. —Houghton Estate, Gauteng
5 Years’ experience within either an Information Security position or Cybersecurity, which include protection against social engineering, or security…
Information Security Analyst L1
SBV Services (Pty) Ltd. —Houghton Estate, Gauteng
Support the Information Security Analyst L2 to create a collaborative program to coordinate and drive operational activities related to Cyber Security,…

I want to receive the latest job alert for information security analyst l2 in midrand gauteng

By signing in to your account, you agree to SimplyHired's Terms of Service and consent to our Cookie and Privacy Policy.

Explore jobs in more locations

information security analyst l2 jobs near midrand gauteng

Systems Analyst jobs in Midrand, Gauteng

Information Security Analyst jobs in Sandton, Gauteng

Government Information Technology jobs in Gauteng

Transnet, Security jobs in Cape Town, Western Cape

Security Officer, Grade C, Titanium Security jobs in Bellville, Western Cape

Information Security Analyst jobs in Randburg, Gauteng

Information Security Analyst jobs in Norwood, Gauteng

Systems Analyst jobs in Port Elizabeth, Eastern Cape

Systems Analyst jobs in Stellenbosch, Western Cape

Test Analyst jobs in Johannesburg, Gauteng

Systems Analyst jobs in Cape Town, Western Cape 8001

Information Security Analyst L2

SBV Services (Pty) Ltd. -
Houghton Estate, Gauteng

Apply Now

Job Details

Full-time

Full Job Description

Support Technology Transformation & Innovation in your area of responsibility

Support with developing and maintaining Cyber Security Road Map and interventions
Support with developing company-wide best practices for Technology security
Support improving the maturity, or efficiency, of the Cyber Security team, by identifying innovative, problem-solving solutions.
Creates and maintain appropriate standard operating procedures for the Cyber Security and information protection.

Support on Analysis & Planning Activities

Identify, respond, predict and analyse security breaches and threats to determine their root cause and report findings to relevant stakeholders on cyber-security threats, attacks, incidents, and other factors that indicate security risks as per SLA.
Researching, investigating and developing proficiency in current and emerging threats, vulnerabilities, and security technology developments.
Play an active role in Technology Security Planning sessions, driving agenda and deliverables with all participants.
Support managing Vendor Strategy and roadmap for Information Security
Establish plans and protocols to protect digital files and information systems against unauthorized access, modification and/or destruction within mandate
Assessment of the organisation's technology risk exposure and measurement of the various parameters that make up technology risks.

Support the Design for your area of responsibility

Work closely with other stakeholders to design, architect, consult and implement security solutions to ensure readiness for security technologies
In support of program design, gather client requirements and draft documentation in order to compile a draft project plan, only more complex programs need to be reviewed by the Information Security Officer
Identify the desired outcomes and success criteria which is to be the baseline for post project review and benefit realisation validation, as well as measuring positive effects.
Contribute to project risk management consulting and technical reviews, drafting mitigation plans and delivering on any actionable items allocated
Drafts procedures and or policies with regards to cyber security submitting them to the Information Security Officer for review and authorisation.

Implementation & Execution within mandate

Monitor and analyse Cybersecurity operational services, including intrusion detection and prevention, situational awareness of:

o network intrusions.
o security events.
o data spillage; and.
o Incident response actions.

Identify and resolve vulnerabilities in networks, servers, systems, and applications by performing vulnerability scans.
Investigate improper access to ensure proper access; revoking access; reporting violations; monitoring information requests by new programming; recommending improvements including but not limited to privilege account management.
Provide daily operational effectiveness reporting to the Information Security Officer
Create and update weekly dashboard view of cyber risk ratings in the organisation.
Prepare reports for circulation to the management teams related to investigations and treats for the month, this will also be rolled up into quarterly reporting.
Support with managing vendor resource deliverables to ensure quality and consistency of services
Audit vendor services and report on non-performance or execution deficiencies to the Information Security Officer

Risk & Quality Management within one’s area of responsibility

Drives vulnerability testing, risk analyses and security assessments providing findings to the Information Security Officer
Maintain compliance with core risk management concepts, such as vulnerability management and threat intelligence.
Guide teams throughout the organisation, imparting knowledge to enable employees to become Technology Security champions
Create a collaborative program to coordinate and drive operational activities related to Cyber Security, including event and incident investigation, process development and optimization, playbooks, and exercise development.
Assists with managing vendor resource deliverables to ensure quality and consistency against SLA as per mandate

To be the point of contact that interface between vendors and business units during audits, assessments or security reviews as per mandate
Advise Technology business partners on regulatory, compliance (POPI, PAIA, etc) and/or legal requirements as it relates to securing of data.
Drive compliance regarding Information Security business continuity planning.
Subscribe and align to SBV Services' ISO 9001:2015 Quality Management Standards, ensuring the department’s processes and quality management system is at all times in compliance with the standard
Support SBVs ESG journey, reporting on and managing the ESG requirements to ensure a positive reflection and outcome.

Create awareness of IT Security good practices to the relevant stakeholders through communication and training

Foster relationships within the organization in order to implement security interventions that are relevant to current business needs.
Work across the organization to present contextual risk information to business colleagues, influencing strategic and operational decisions.
Lead and collaborate on lessons learned and root cause activities, including incident response processes until closure with all relevant stakeholders.
Drive compliance with Cyber security Training, in conjunction with Organisational Development, and awareness including alerting and escalations of non-compliant staff
Develops security awareness by providing orientation, educational programs, and on-going communication.
Develop, document and distribute how-to guides and update the internal knowledge base

Adhere to Process and Policy

Strives for 0 data material breaches and findings in Audits
Drives any audit findings departmentally providing regular feedback to the Information Security Officer
Manage internal control framework ensuring internal controls are reviewed periodically by departments as well as driving internal control adherence and compliance
Create and maintain appropriate standard operating procedures for Information Security, including business continuity plans.
Establishes system controls by developing a framework for controls and levels of access, recommending improvements.
Comply with established security configuration standards and best practices.

Drive compliance of the audit framework

Monitor and drive compliance against the audit framework. Logical access, physical access, change management, security controls (hardware, software and data levels). Implement additional processes, such as Segregation of Duties, Password Safes and Audit trails, to address the risk posed by privileged Technology users.
Conduct reviews and assessments according to policies and standards set out (across PM Lifecycle and SDLC).
Conduct internal and external security audits, providing recommendations to close any potential gaps within the process and or system
Conduct technical security reviews and perform technical risk assessments.

Support the SBV United Ethos

Act as a coach or guide to new employees within the department, peers and others
Contribute to building a knowledge sharing culture within the department
Where applicable, take the opportunity to upskill oneself on future skill sets and other roles with the department/SBV

Lead as an Ambassador and executor of Change.

Act as a change management architect in periods of change to ensure business continuity.
Manage the integration of business units into a seamless end to end solution for customers.
Effectively communicate and embed new processes and procedures as they occur, addressing or escalating matters/ concerns to the SME’s (subject matter experts) when required.
Facilitate the necessary presentations, workshops, or forums to ensure consistent and accurate communication is given across one’s portfolio.

5 Years’ experience within either an Information Security position or Cybersecurity, which include protection against social engineering, or security vulnerability remediation, of which:
2 Years’ IT administration experience
2 Years’ Ethical Hacking experience
In-depth knowledge of Cloud security platform (MS Intune / O365 Security, etc.)
In-depth knowledge of Firewalls and Malicious Code Defense including APT
Knowledge of Cybersecurity technical assessments, standards, tools, and processes
Knowledge of common attack vectors
Knowledge of Vulnerability assessment tools (Nessus, Nmap)
Endpoint and network security tools/techniques

Requirement: Education

Bachelor’s degree in Information Security or similar.
Industry certifications such as CISSP, SANS/GIAC: GSEC, GCIH, GFCA, GCFE, GCIA; EC-Council: CEH, ECIH, CHFI, ECSA; Security+; Tenable: TCNU, TCNA, TCSE, ISO27001 (Candidates with certifications will be given preferential reviews)

NB: Communication will be limited to shortlisted candidates only.

SBV recruitment is committed to transformation and diversity alignment

Apply Now

Refine Your Search

information security analyst l2 jobs in midrand gauteng

Information Security Analyst L2

Information Security Analyst L1

Remote Systems Analyst (L2)

Related jobs to explore

I want to receive the latest job alert for information security analyst l2 in midrand gauteng

Explore jobs in more locations

Job Seeker Tools

Employer Tools

Browse

Stay Connected