Cyber Security Specialists play a critical role in protecting an organisation’s information assets and ensuring the resilience of its cyber security defences. They provide leadership, strategic direction, and operational oversight to safeguard against cyber threats, maintain the confidentiality, integrity, and availability of sensitive information, and protect the NWU’s information assets

 

Takes full responsibility for the definition, documentation and successful completion of complex programs.

Ensures that projects, teams and functions have appropriate CS practices and meet required organisational quality levels.

Develops the change management approach and a change management plan in collaboration with sponsors, users and project teams. 

Manages suppliers to meet key performance indicators and agreed targets.

Have oversight for the definition, documentation and successful completion of complex Cyber Security projects.

Ensures that CS programme/project leads and/or service owners adhere to the agreed portfolio management approach and timetable.

Plans and implements complex and substantial risk management activities within the Cyber Security Programme.

Provides organisational leadership and guidelines to promote developing and exploiting specialist Cyber Security knowledge in the NWU. Maintains a network of recognised experts (inside and/or outside the organisation) who can deliver expert advice in relevant areas. Provides input into professional development planning across IT to further the development of Cyber Security.

Specifies solutions for use in Cyber Security learning and development programs in the workplace or in compulsory, further or higher education.

Co-develops and communicates corporate information security policy, standards and guidelines as set out in the Information governance framework.

Co-develops information assurance policy, standards and guidelines.

Defines the workforce planning approach for Cyber Security in line with strategic business goals. Communicates the CS workforce planning approach and obtains organisational commitment.

·         A 4 year bachelor’s degree (NQF level 8) in Computer Science or STEM.

·         A minimum of 5 years’ proven experience in network security, vulnerability assessment, penetration testing, incident response, firewall configuration, identity and access management, data encryption, secure coding practices, and security infrastructure design.

·         A minimum of 5 years’ hands-on experience with security tools, conducting security assessments, and responding to security incidents.

 

·         Accreditations with the following:

 

·         Industry knowledge in understanding common attack vectors, emerging technologies, and compliance requirements (such as GDPR or HIPAA).

·         Problem solving and analytical skills.

·         Effective communication and collaboration skills.

·         BURM - Risk management (5)

·         PBMG - Problem management (5)

·         CHMG - Change control (5)

·         SCAD - Security operations (5)

·         VUAS - Vulnerability assessment (5)

·         DGFS - Digital forensics (5)

·         PENT - Penetration testing (5)

·         SCTY - Information security (6)

·         INAS - Information assurance (6)

·         PEDP - Personal data protection (6)

·         THIN - Threat intelligence (6)

·         TECH - Specialist advice (6)

·         PRMG - Project management (6)

·         STMG - Storage management (6)

·         SFIA - Skills Framework for the Information Age (6)

 

·         Autonomy: has defined authority and accountability for actions and decisions within a significant area of work, including technical, financial and quality aspects. Establishes organisational objectives and assigns responsibilities.

·         Influence: influences policy and strategy formation. Initiates influential relationships with internal and external customers, suppliers and partners at senior management level, including industry leaders. Makes decisions which impact the work of employing organisations, achievement of organisational objectives and financial performance.

·         Complexity: has a broad business understanding and deep understanding of own specialism(s). Performs highly complex work activities covering technical, financial and quality aspects. Contributes to the implementation of policy and strategy. Creatively applies a wide range of technical and/or management principles.

·         Knowledge: promotes the application of generic and specific bodies of knowledge in own organisation. Has developed business knowledge of the activities and practices of own organisation and those of suppliers, partners, competitors and clients.

· Business: demonstrates clear leadership. Communicates effectively at all levels to both technical and non-technical audiences. Understands the implications of new technologies. Understands and communicates industry developments, and the role and impact of technology in the employing organisation. Absorbs complex information. Promotes compliance with relevant legislation and the need for services, products and working practices to provide equal access and equal opportunity to people with diverse abilities. Takes the initiative to keep both own and colleagues' skills up to date. Manages and mitigates risk. Takes a leading role in promoting security throughout own area of responsibilities and collectively in the organisations.

 

The annual total remuneration package will be commensurate with the level of appointment as advertised and in line with the NWU policy guidelines.

ENQUIRIES REGARDING RECRUITMENT PROCESS MAY BE DIRECTED TO:   Mr Rabs Diratsagae, Tel: 018 299 4797

CLOSING DATE:                                                                                                  13 February 2024

PLANNED COMMENCEMENT OF DUTIES:                                                          As soon as possible