Director Of It Security Operations - Gauteng - Findojobs South Africa

Description

We are looking for a highly skilled Director of Security Operations to join our team at WSP.

The successful candidate will be responsible for leading our Security Operations Centre and working closely with the Manager of Incident Response and Manager of SOC Tools and Operations.

This role is primarily internally facing, although some interaction with clients and third parties may be required.

The Director of Security Operations will have multiple security-related roles within the organization and will be responsible for providing a secure computing environment for the organization to conduct its business.

The global security operations team will have overlapping duties; however, each role will have more specifically focused duties.

The director will be responsible for the overall direction and planning for both the incident response and tools team, liaising with our contracted partner for Level 1 and 2 Security Operations, 24/7 incident response, Security tool management, etc.

Key Responsibilities:

• Assist in providing forensic capabilities for the incident management process when needed.
• Monitor and manage infrastructure logging for security, including perimeter network devices, malware prevention, and intrusion prevention.
• Define security configuration and operations standards for security systems and applications, including policy assessment and compliance tools, network security appliances, and host-based security systems.
• Develop and validate baseline security configurations for operating systems, applications, and networking and telecommunications equipment.
• Formulate the company's Endpoint protection strategy, including but not exclusive to malware, host intrusion, encryption, browser protection, and hardware-level security controls.
• Determine and maintain the technical standards for configurations of routers, switches, firewalls, IPS, and IDS devices.
• Maintain our PAM toolset, ensuring least privilege across the organization, including secret management and elevated account management.

Leadership and People Responsibilities:

• Director of two separate managers within the security organization, 2nd level management of Incident response and tools teams.
• Displays leadership and independence in performing their role, with an ability to make complex decisions with limited input and review from senior staff.
• High level of personal integrity, and the ability to professionally handle confidential matters and exude the appropriate level of judgment and maturity.
• Assist in the hiring, training, and coaching of new and existing staff, and provide coaching to staff executing all aspects of information security and risk assessment and support.
• Develop positive working relationships with other team members and business partners and partner across teams to align with WSP internal and external client demands.
• Capable of rapidly assimilating and internalizing new complex business, technology, and risk management concepts and dependencies.
• Capable of clearly defining, presenting, and selling recommended strategies to senior management teams in a business or technical context as appropriate.
• Able to interpret and apply laws, regulations, policies, and guidance relevant to the organization information security objectives.
• Excellent written and verbal communication skills, interpersonal and collaborative skills, and the ability to communicate between specialized groups of business unit and IT professionals.
• Accommodation of schedule for international conference calls, limited travel within the regions you are responsible for.
• Ability to work with people from different backgrounds and cultures across the region and the world.
• Provide review feedback for analysts and other direct reports.
• Capacity Management within the SOC teams, including growth expectations, M&A onboarding, etc.

Finance / Budgetary Responsibilities:

• Support the Global Vice President Security Engineering and Operations in developing the budget projections based on short- and long-term goals and objectives.

Qualifications:

• Related experience in information security, risk, compliance, or similar position.
• Bachelor's degree or equivalent in Information Technology, Computer Science, Engineering, or related field.
• Certification in Information Security (CISSP, ISC, or CISM) practices and policies.
• Knowledge of security technologies (encryption, data protection, network intrusion prevention, EDR, firewalls, privilege access, etc.).
• Knowledge of enterprise IT security concerns and technologies, including but not limited to VPNs, network security, encryption, authentication, application-level network protocols, PKI, IPSec, Firewall, SSH, SSL, LAN / WAN, and TCP / IP.
• Knowledge of security best practices with relation to applications, network, and client setups.
• Experience with IT Governance frameworks such as COBIT, ITIL and ISO 2700x, NIST.
• Experience with governance, compliance, and audit within IT environments.
• Experience of risk management, including risk analysis, mitigation, and monitoring.
• Knowledge of information security regulations applicable to WSP.

Preferred Qualifications:

• Master's degree in information technology, Computer Science, Engineering, or related field.
• Knowledge of KQL, Python, and PowerShell is a plus.

What We Offer:

At WSP, we recognize that work is only one part of our lives and making time for the other things in our life is important – be that our families, our friends, or ourselves.

We offer a range of benefits to support your well-being, including first-class medical cover, generous days annual leave, and paid professional subscriptions.

We strive to have a friendly and inclusive culture which respects and maximizes the contribution individuals can bring to WSP.

We positively encourage applications from suitably qualified and eligible candidates regardless of sex, race, disability, age, religion or belief, marital status, pregnancy or maternity/paternity.