Transnet is Hiring -Snr Security Specialist

Operating Division : Transnet Freight Rail

Position Title : Snr Security Specialist

Employee Group : Non Permanent

Department : ICT

Location : Parktown

Reporting To : Principal Architect

Grade Level : E

Reference Number : 50015592

Position Purpose:

The Security Specialist works with executive management to determine acceptable levels of risk for the enterprise and will liaise with TFR’s Business and Operational Risk specialists to establish an enterprise risk mitigation strategy.

This role is responsible for development and implementation of a complete Information Security and Business Continuity Management program for managing identified IT risks; and in so doing must assess the business impact, relative vulnerability and cost of mitigation to prioritise Information Security investments. The incumbent must also define IT Security Management metrics as well SLA/OLAs with the service provider for the operational aspects which must be reported on a regular basis. The role must design and manage the entire Business Protection Life Cycle, including risk assessments, policy setting and governance implementation, and execution of risk mitigation solutions.

The incumbent must develop an IT continuity (encompassing disaster recovery planning (DRP) and service continuity) planthat is aligned with the corporate BCM and as far as possible use their emergency notification and crisis management mechanisms. The role may assist the business with the selection and implementation of these solutions.

The Business Continuity Management framework will include the development and implementation of emergency notification systems, incident response management systems, business continuity plans and crisis management. This role manages information security governance and ensures that appropriate information security controls are in existence and implemented throughout TFR.

Position outputs:

1. Develops security architectural vision, strategy, principles, standards and solutions together with creation and delivery of detailed technical documentation and presentations

2. Work with executive management to determine acceptable levels of risk for TFR
3. Compile and implement TFR IT Risk Management and Business Continuity Management Framework and strategy in collaboration with Process Owners and IT Management that is aligned with generally accepted best practices and standards.

4. Assesses business risks (including assessing impacts, vulnerabilities and probabilities), and develop and manage the mitigation strategy; with assessment of cost of each risk mitigation response

5. Develop the overall Identity and Access Management strategy for TFR and oversee the implementation on an appropriate solution

6. Provide subject matter expertise to executive management
7. Provide strategic and tactical security guidance for all IT projects, including the evaluation and recommendation of technical controls.

8. Liaise with the enterprise architecture team to ensure alignment between the security and enterprise architectures, thus coordinating the strategic planning implicit in these architectures.

9. Establishment of governance structures involving business, audit and enterprise risk management.
10. Ensure regulatory compliance
11. Monitor security industry information sources and keep abreast of events, research and developments
12. Development and assessment of RFIs and RFPs
13. Service level management of security operations including incident reporting
14. Assist and guide the disaster recovery planning team in the selection of recovery strategies and the development, testing and maintenance of disaster recovery plans.

15. Provide technical guidance at information security committee meetings.

Qualifications & Experience:

• A relevant Bachelor’s Degree or Information Security Professional Certification (CISSP, CISM, CISA).
• Five to seven years’ experience in Information Security Architecture role
• ITIL and TOGAF Certification preferred

Competencies:

Competencies Required:

• Sound knowledge of Information Security Best Practices
• Competency in developing effective Information Security Solutions to diverse and complex business problems
• Experience with setting up and managing an Information Security Management System (ISO 270000)
• Knowledge of business continuity and disaster recovery plans
• Understand Service Level Agreements (SLA’s) and Underpinning Contracts
• Strong analytical and problem-solving skills

Knowledge:

• Knowledge of security and control frameworks, such as ISO 17799, CobiT and ITIL.
• Knowledge of risk assessment procedures, policy formation, role-based authorisation methodologies, authentication technologies, and security attack pathologies

• Analysis and Forecasting
• Evaluate infrastructure designs and the likely performance based on expected business needs, usage and traffic volume
• Technical proficiency in security-related hardware and software; ability to interact knowledgeably with strategic partners and vendors, and with other Transnet Group Security Specialists as a recognised technical expert

Skills required:

• Team Work
• Inter-personal skills
• Oral Communications
• Written Communication
• Logical Analysis
• Stakeholder Management
• Risk Management

How to apply

Applicants that are interested in applying for any of the advertised positions must apply by registering on the Careers section

of the Transnet Internet. Please take care in completing all required details on the profile, and then apply for the position.

Alternative Application Methods: (Completed Curriculum Vitae to be submitted)

NB: This is a 1 year Fixed Term Contract position.

NB: The candidate must meet the minimum inherent health requirements of the job

Note: if you have not been contacted within 30 days of the closing date of this advertisement please consider your

application as unsuccessful.

Any questions regarding the application or recruitment process should be sent in writing to

BENJAMIN.MOJALEFA@TRANSNET.NET.

The closing date is on 14.08.2020. It is the responsibility of the applicant to ensure that HR has received the application

before the closing date of the advertisement