Specialist Information System Security Gauteng

BRIEF DESCRIPTION:-

The Information System Security Specialist is responsible for conducting compliance and vulnerability assessments, managing security incidents, and implementing information security controls in line with cybersecurity frameworks. Key requirements include a National Diploma in a related field, relevant certifications, and 3 to 5 years of experience in ICT infrastructure and information security.

Job Title: Information System Security Specialist Company: SITA SOC (Ltd)

Description

The role will entail conducting compliance and vulnerability assessments, executing tasks pertaining to the establishment and upkeep of information security controls and services in line with the cybersecurity framework, and managing all logged security incidents.

Key Responsibilities

• Conduct continuous monitoring of information systems, evaluating threats and risks to information security. • Collaborate with internal business representatives to recommend appropriate products that align with relevant security system design specifications. • Organize and implement security awareness and training programs to enhance employees' understanding, reaction time, and proficiency in anticipating the company's safety and compliance needs. • Carry out compliance and vulnerability assessments to ensure the protection of government and citizen information. • Address all logged security incidents. • Perform duties related to the implementation and maintenance of information security controls and services as per the cybersecurity framework, policies, standards, and procedures. • Facilitate the coordination and updating of Business Continuity, Disaster Recovery, and Incident Response plans.

Qualifications and Experience

• Required Qualification: A National Diploma in Computer Science, Information Technology, Network Management, or a related NQF level 6 discipline. • Certificate: An ITIL foundation and COBIT 5 Introduction are advantageous. Certified Information System Security Professional (CISSP) or Certified Information Security Management (CISM) credentials are also advantageous. • Experience: 3 to 5 years in Information and Communication Technology (ICT) Infrastructure, Information Security (IS), or application lifecycle management, including knowledge of information technology security risk management, exposure to enterprise architecture frameworks (e.g., TOGAF, GWEA, MIOS), knowledge of governance processes and standards (e.g., ISO 27001/27002, COBIT, ITIL), and experience with information system security technical standards (e.g., SSL certificates, anti-virus protection, etc.).

Technical Competencies Description

• Working knowledge of information technology security risk management. Familiarity with enterprise architecture frameworks (e.g., TOGAF, GWEA, MIOS), governance processes and standards (e.g., ISO 27001/27002, COBIT, ITIL), and information system security technical standards (e.g., SSL certificates, anti-virus protection, etc.). • Technical competencies: Enterprise ICT Governance (Policies & Legislation), Information Management, Information Security and Application Protection, IT Project Management, IT Service Management, and IT Risk Management. • Interpersonal/behavioural competencies: Active listening, attention to detail, analytical thinking, continuous learning, and disciplined approach.

Deadline: 23rd October, 2026