Senior Specialist - Group Technology Assurance : Vodacom

Job Summary

•To provide assurance within Technology across the Vodacom OPCOs covering the areas of Cyber Security, SOX and GITC including governance & reporting, independent assurance, risk & control guidance and continuous monitoring of the Risk and Controls environment.
•The base location for this role is Midrand

Duties and Responsibilities

•Perform reviews on technology processes, systems, infrastructure and network infrastructure across the Cyber Security and GITC environments with the aim of proactively enhancing the control environment.
• Guiding management on recommendations for closure of items found.
Control design and implementation across the Cyber Security and GITC environments within Technology and related processes
•Conduct internal and external security assurance scans using tools or developing/scripting tools
•Implementation of Continuous Monitoring techniques across the Cyber Security and GITC environments
•Travelling to local markets to assist management with governance and risk management

Qualifications and Experience

•Matric (Essential)
•Must have technical / professional qualifications:
•A relevant IT/Technology Degree (e.g. BSc Computer Science/Engineering, BCom Informatics)
•Relevant certifications would be advantageous, such as CISA, CISM, CRISK, CISSP, ITIL etc
Overall experience 5 - 8yrs, inclusive of:
•At least 5-8 years’ experience in risk, assurance, controls and compliance management in a technology environment
•At least 5 years’ experience in Technology Security or a Technology Audit function would be advantageous
•At least 3-5 years’ experience in process definition and management is advantageous
•A relevant Technology post graduate degree\diploma will also be an added advantage
•IT Audit is mandatory, Risk Management or Cyber Security in large enterprises are required.
•Relevant Frameworks, CISA is mandatory, SOX, ISO 27001/27002, CISSP are preferable.
•Technical/Infrastructure knowledge is required i.e. detailed knowledge of at least three of the following platforms:
•Operating Systems(LINUX, Windows)
•IT Networks, Firewalls, VPNs
Databases (SQL, Oracle, MySQL etc)
•GSM Network Infrastructure
Security and Development knowledge is advantageous
Linux Kali and associated tools
•Asset discovery techniques
Scripting (Linux bash, JavaScript etc)
•Python/PHP or other programming languages
Zoning, DDos detection, Web Traffic filtering, Malware, IDPS
Patching, Vulnerability Management, Pen Test techniques
•Personal attributes required
•Grasping of technical concepts rapidly and the ability to articulate these concepts to technical and non-technical audiences
•Strong analytical and documentation skills
•Good client engagement skills
•Good interpersonal and presentation skills

How to Apply

Click here to apply