Specialist - Information and Communication

**Role Purpose**:
Reporting to the Manager: Information & Communication Technology, the role will be responsible for the data security and network infrastructure.

The work of a Specialist: Information & Communication Technology (ICT) Security is an advisory and compliance driven position, responsible for reporting any security concerns to the relevant stakeholders (Application Administrator, Manager: IC&T, the Legal Team and Executive management).

The role must ensure that data integrity is on or better than international standard, this includes data backups and maintaining access to the data. The role forms part of the Emergency response team, in this capacity the Specialist: ICT Security will be able to guide management to manage risk to ICT infrastructure.

**Responsibilities**:

- Responsible to oversee wide area network connection:

- Assist each mines ICT Department and users with connectivity problems relating to connecting out to the Data centre and Internet.
- Assist the Manager: Information Communication & Technology with planning bandwidth and availability strategies and infrastructure for Wide Area Connections based on requirements received from mines and group budgets
- Responsible to evaluate new technology, review and provide feedback on proof of concept solutions tested by the mining
- Operation departments or Group Departments.
- Ensure adherence to all legislation:

- Network Security: ISO27001
- Protection of Personal Information Act, 2013
- Electronic Communications Act 36 of 2005
- Electronic Communications and Transactions Act, 2002 No. 25 of 2002
- Ensure adherence to company policies and procedures.
- Responsible for maintaining Fortigate Production, ICT and General ICT Firewall infrastructure.
- Responsible for protecting the security on the WAN connecting the mines in the Group.
- Responsible for maintaining current Physical Servers as well as all Virtual server infrastructure.
- Responsible for maintaining software security updates and anti-virus for all computers and server.
- Responsible for securing mobile devices.
- Responsible for performing faultfinding on servers and 3rd level user support.
- Engage internal and external stakeholders on ICT Security related matters, and support operations on ICT Security related engagement.
- Responsible to provide assistance to security personnel in terms of ICT related investigations:

- Assist the Security Investigation Officers to conduct ICT related collection of evidence for open investigations for criminal or IR cases
- Establish and maintain good working relationships and an effective / sound communication system with the ICT Function and operation.
- Implement programs, standards & controls, guidelines and schedules.
- Identify deviations to standards through appropriate work processes.
- Participate in a sustainable process to identify, assess and rank Application Integration Architecture risk as these relate to the business and operations, in order to promote an Application Integration Architecture and risk-aware culture, ensure that any potential impact is understood, and facilitate effective decision-making, Application Integration Architecture risk mitigation and provide this as input into the ERM program.
- Implement risk mitigations plans and controls.
- Model behaviour that is consistent with the Company’s Vision, Values and Code of Ethical Conduct.

**Minimum Requirements**:

- National Diploma - Information Technology
- 5 years ICT Security experience in a similar environment
- Advanced level knowledge in Microsoft Applications. (Server Operating Systems, Active Directory, Domain Host Name
- Services, SQL, Exchange, SharePoint etc.)
- MCSE Microsoft Certified Systems Engineer Qualification
- Advanced Network Security and Architecture
- Certified Security Analyst and Licensed Penetration Tester OR CISSP professional membership
- Computer Literacy and Microsoft Office Suite (Advanced)
- Valid Drivers’ License

**Technical Competencies**:

- Ensure third party software run according to best practices.
- Review firewall rule set from ISP as and when required.
- Perform troubleshooting concerning the event viewer.
- Perform End Point Protection installations and updates as and when required.
- Install and configure servers according to company standards.
- Perform faultfinding on network connectivity problems.

**Behavioural Competencies**:

- Planning and Organising; Decision Making; Earning Trust; Communication; Continuous Improvement; Safety Focus
- Customer Orientation; Valuing Differences; Initiating Action; Managing Relationships.