Director of Security Operations - Midrand, South Africa - WSP Africa

WSP Africa

Verified Company

Midrand, South Africa

2 weeks ago

Posted by:

Thabo Mthembu

beBee Recruiter

Description

Company Description
We are WSP - Join us and make your career future ready

Think bigger scale. Think higher profile. Think ground-breaking.

Join WSP, and you'll be at the heart of a team of international experts all dedicated to growing and sharing their expertise, and working on projects that transform society for all of us.

WSP is one of the most diverse consulting firms in Africa, and the largest environmental consulting firm globally.

To further our strategic business execution plan, we are seeking leaders who share our guiding principles - we value our people and our reputation; we are locally dedicated with international scale; we are future-focused and challenge the status quo; we foster collaboration; we have an empowering culture and hold ourselves accountable.

WSP's Security Engineering and Operations Team is responsible for managing the global organization's security technologies and systems.

The role of Director Security Operations reports directly to the Global Vice President Security Engineering and Operations and is responsible for leading our Security Operations Centre and working with the Manager of Incident Response and Manager of SOC Tools and Operations.

This is primarily an internally facing role, although some interaction with clients and third parties may be required.

Specific areas of responsibility may fall into any one of the following areas of Security Operations, as assigned by the staff's management.

Security Analysis
Threat and Vulnerability Management
Network, Database, Server and Endpoint, and Application Security
Penetration Testing
Antivirus and Antimalware analysis
Event Analysis
Incident Response
Ethical Hacking
Management
Privileged access management

The Director of Security Operations will have multiple security-related roles within the organization. Their main goal will be to provide a secure computing environment for the organization to conduct their business. The global security operations team will have overlapping duties however each role will have more specifically focused duties. As such, the role and essential duties will fit into the below classifications most closely.

The director will be responsible for the overall direction and planning for both the incident response and tools team, liaising with our contracted partner for Level 1 and 2 Security Operations, 24/7 incident response, Security tool management, etc.

Incident Management Process and Forensics - assist in providing forensic capabilities for the incident management process when needed. Monitor and manage infrastructure logging for security, including perimeter network devices, malware prevention, and intrusion prevention.

Endpoint Protection Strategy - Formulate the companies' Endpoint protection strategy, including but not exclusive to malware, host intrusion, encryption, browser protection and hardware level security controls.

Network infrastructure security - responsible for determining and maintaining the technical standards for configurations of routers, switches, firewalls, IPS and IDS devices.

Privileged access management - responsible for maintaining our PAM toolset, ensuring least based privilege across the organization, including secret management and elevated account management.

Leadership and People Responsibilities:

Director of two separate managers within the security organization, 2nd level management of Incident response and tools teams.
Displays leadership and independence in performing their role, with an ability to make complex decisions with limited input and review from senior staff.
High level of personal integrity, and the ability to professionally handle confidential matters and exude the appropriate level of judgment and maturity.
Assist in the hiring, training, and coaching of new and existing staff, and provide coaching to staff executing all aspects of information security and risk assessment and support.
Develop positive working relationships with other team members and business partners and partner across teams to align with WSP internal and external client demands.
Capable of rapidly assimilating and internalizing new complex business, technology, and risk management concepts and dependencies.
Capable of clearly defining, presenting and selling recommended strategies to senior management teams in a business or technical context as appropriate.
Critical thinker with strong problemsolving skills, project management skills; financial/budget management, scheduling and resource management.
Excellent written and verbal communication skills, interpersonal and collaborative skills, and the ability to communicate between specialized groups of business unit and IT professionals.
Accommodation of schedule for international conference calls, limited travel within the regions you are responsible for.
Ability to work with people from different backgrounds and cultures across the region and the worl