Job Description

Introduction

A vacancy exists for an IT Security Operations Manager, reporting to the Head: Technology Services. The IT Security Operations Manager manages the day-to-day operational aspects of the Information Security environment. This involves managing the activities of the information security team to ensure that daily activities associated with providing information security services to the organization are met. The incumbent is responsible for establishing and enhancing client's overall IT security monitoring and operational activities.

A key objective for this role will be to interact with all levels of personnel to implement tools and controls that reflect business and operational needs balanced with legal and regulatory requirements and risks. To also lower the information security risk profile of the business unit through establishing capabilities for proactive and continuous monitoring, detection and coordinated responses to common and advanced information security threats.

Critical outputs

• Assist the Head of Technology Services to develop and implement a robust security monitoring strategy by establishing a capability for continuous management of correlated business and technology rules to detect common and advanced information security threats. The strategy would include the collection and reporting of intelligent security operational metrics to management for decision making and providing real-time situational awareness.
• Assist to develop and maintain technology, operations roadmaps for security infrastructure components, including but not limited to intrusion prevention/detection, data security, identity and access management, IT/network security, security information & event management, vulnerability management, etc.
• Lead all information security implementation projects and provide hands-on support
• Oversee and manage daily activities such networas user account maintenance, activity report reviews, customer service centre call response etc.

• Collaborates with business and technology teams, identifies and presents tactical and strategic recommendations on improving the business units information security posture.
• Manages and maintains security operations in line with the organisations Security Policies, Standards, Procedures and Industry Best Practices.
• Proactively monitors, assesses and continuously improves the organisations security posture by identifying security gaps within the environment and the services provided, making recommendations and taking remedial action.
• Prepares management information, systems and service security reports.
• Develop remediation plans for process/policy related information security vulnerabilities.
• Proactively manages threat detection and vulnerability management services and lead required remedial activities.
• Reviews all security related activity to ensure service levels.
• Performs access, systems and network reviews.
• Manages all the Threat Management and Incident Handling. Manages and maintains the security incident handling process within the firm

• At least 5 to 7 years of experience exclusively in an Information Security role with an IT background.
• Experience in overseeing an information security program in an institution is required including solid experience and understanding of the regulatory environment and information security requirements of an institution.
• Diploma or Degree in Information Technology or related IT qualification
• Relevant security certifications in information security - e.g. CISSP
• Sound knowledge of Information Security controls, concepts, and best practices is required along with a solid understanding of technology and associated security risks.

• Problem-solving, analysis and judgement
• Resilience
• Engaging diversity
• Verbal & written communication
• Influencing
• Building relationships
• Drive & energy
• Excellence orientation
• Ethical behaviour

Tipp Focus