Job Ref. No. JLIL 274

Role Purpose

• The role holder will be primarily responsible for identifying potential threats and vulnerabilities to operational environments. Projects here could include penetration testing and simulating physical breaches to identify vulnerabilities.

Main Responsibilities

Strategy

• Develop and implement security strategies and protocols to protect against cyber threats and data breaches.
• Collaborate with stakeholders to assess risks and vulnerabilities and devise proactive security measures.
• Stay abreast of emerging security trends, technologies, and best practices to continually enhance our security posture.

Operational

• Perform penetration testing which includes internet, intranet, wireless, web application, social engineering and physical penetration testing.
• Execute Blue/Red team scenarios to highlight gaps impacting organizations security postures.
• Ability to work both independently as well as lead a team of technical testers on penetration testing and red team engagements.
• Provide technical leadership and advise junior team members on attack and penetration test engagements.
• Identify and exploit security vulnerabilities in a wide array of systems in a variety of situations.
• Perform in-depth analysis of penetration testing results and create a report that describes findings, exploitation procedures, risks, and recommendations.
• Execute penetration testing projects using the established methodology, tools, and rules of engagement.
• Convey complex technical security concepts to technical and non-technical audiences including executives.

Corporate Governance

• Ensure compliance with regulatory requirements, industry standards, and internal policies related to data protection and privacy.
• Develop and maintain documentation, including security policies, procedures, and incident response plans
• Provide guidance and support to internal teams on security-related matters and promote a culture of security awareness and compliance.

Leadership & Culture

• Fostering a corporate culture that promotes ethical practices and good corporate citizenship while maintaining a conducive work environment.
• Promote a culture of ethical behavior by acting with integrity, treating all children equally, and providing a safe, respectful environment that meets the organization’s values.
• Create personalized development plans that align with your career aspirations and the organization’s objectives.

Key Competencies

• Knowledge of security policy standard development, secure infrastructure design & reviews
• Working knowledge and experience with virtualization, remote access and secure mobile technologies

Qualifications

• Bachelor of Science Degree in Computer Science or other Computer related field from a recognized University
• Information Security Qualification: Certified SOC Analyst/ Certified Incident Handler/ Security +/CISA/ CEH Networking Competencies: MCSE, CCNA/CCNP
• IT service management: ITIL
• Cloud competency

Relevant Experience

• 2 years of Technology experience with at least 1 year experience in Cybersecurity in a large or medium sized organization.