Intermediate Information Security AnalystDetailsClosing Date: 2025/01/03Reference Number: PPS241219-1Job Type: PermanentJob Title: Intermediate Information Security AnalystBusiness Unit: PPS InsCoDepartment: GroupLocation: Parktown, Gauteng, South AfricaJob Advert Summary:The Intermediate Information Security Analyst will be responsible for managing the organisation's security posture to ensure the protection of systems, networks, and sensitive data against security threats, computer viruses, and other related cyber-security attacks.Education:BSc / B.Tech or N.Dip (Computer Science or Information Systems).Security Certification Advantageous.Beneficial MCSE (Security) or similar IT Operations certification.Experience:3 to 5 years working experience in information security.5-7 years in IT operations (inclusive of above).Technical understanding/skill set in Linux, Java, Windows.Technical understanding of cloud platforms (Azure and GCP).Demonstrated understanding of Networking/Firewalling Knowledge and TCP/IP.Good computer skills in Microsoft Word, PowerPoint, and Excel are essential.Knowledge and Skills:Knowledge of IT Security and Risk Management frameworks, policies, standards, and technologies – ISO27001/2.Malware Management Knowledge.Vulnerability and Patch Management.OS/Application VM Knowledge.Web monitoring solutions.Data leakage on endpoints.Virtual server protection.Database monitoring.Desktop Firewall and IPS solutions.EDR Solutions.Analytical and Technical skills.Ability to work in a team and independently.Planning and organising.Effective Communication.Quality Orientation.Result Orientation.Flexibility.Duties and Responsibilities:Security Monitoring:Monitoring of all security tools (e.g., Crowdstrike, CyberArk, Darktrace, ZScaler, O365 Security and Compliance, Azure Security, GCP security).Keep abreast of changes in the standards, technologies, or methodologies and threats.Stay current with IT security knowledge and skills to maintain professional expertise and relevance.Security Incident and Alert Response:Log and monitor calls based on security incidents and alerts from security tools as well as monitor calls logged by external SOC provider.Understanding of the Incident Management Processes in order to restore a normal service operation as quickly as possible and to minimize the impact on business operations, thus ensuring that the best possible levels of service quality and availability are maintained.Document issues and risks and escalate to Information and system owners.Understand system and network exploitation, attack pathologies, and intrusion techniques (such as denial of service, sync attacks, malicious code, password cracking, etc.
).Good understanding of Infrastructure Security controls and how to monitor and measure effectiveness.Support Security, Risk, and Governance Team.Conduct Technical and Administrative activities as required from a project and day-to-day perspective.Liaise with Information Security Manager and other stakeholders on findings and rectification actions.Participate in IT security projects aimed at improving IT security in the PPS environment.Security Reporting:Provide raw data and extracted reports from Security Tools for Monthly and Quarterly reporting as well as input to Risk registers, security assessments, and audits.
#J-18808-Ljbffr