Technical Expert Level III: Infosec Incident

"We encourage people with disabilities to apply."

Summary:

The role will have the responsibility of supporting and improving existing technology and processes within Massmart Infosec as guided by policy and standards. The primary purpose is to always protect the business and its interests through proactive and reactive efforts.

FUNCTIONS / RESPONSIBILITIES:

Protection strategy

· Implementation of short, medium and long-term strategy in Information Security, with guidance from the InfoSec Senior Managers and Wal-Mart subject matter experts

· Align the strategy with the overall IT governance, risk and compliance strategy

· Continuous evaluation of existing technology and processes to promote improvements and increased efficiency

Technical Expert planning & implementation

· Developing and maintenance of core security systems

· Ensure that all classified data, including financial, personal, business and Intellectual Property (IP), is safe

· Designing robust and as far as possible secure systems that are not vulnerable to penetration or hacking.

· Use various mathematical or statistical models in the quest to analyze and secure potential threats to their systems

· Provide an all-encompassing role, from the initial theoretical to the ultimate practical implementation of secure communication, processing and storage of data

· Responsible for documenting technical processes and procedures

· Perform trend analysis, identify top incidents and work with respective teams/individuals to minimize incidents and prepare weekly & monthly status reports

· Provide timely communication and actionable intelligence to support the protection of information assets and supporting infrastructure

· Prototyping of new security solutions using programming techniques that incorporate the most secure programming practices which may be required along with staff training

· Assist with compliance, ensuring endpoint security tools are properly installed and fully functional across the organization

Stakeholder management

· Maintain and build effective, professional relationships with third party vendors and service providers that result in timely delivery of requirements and the highest standards of quality and cost effectiveness

· Work with internal stakeholders to gather requirements and develop the most effective solutions

Knowledge Management

· Keep abreast with latest trends in the technical Stream for InfoSec

· Participate in seminars/conferences/forums to keep up to date with the industry best practices

· Engage in on-going development by training and enhancement of IT security

Requirements:

Minimum Academic, Professional Qualifications and Experience required for this position

· Certification in Information Security area

· 3-5 years' experience on security projects for major organizations is desirable Technical Documentation and Organizational Skills

Competencies and Skills

· Strong knowledge of security principles, standards & techniques

· Background in infrastructure and support (network, command line, operating systems)

· Critical Judgment & Decision Making

· Thorough InfoSec process knowledge

· Ability to work independently

· Ability to identify risks and flag those timely

· Detail oriented, with a strong focus on accuracy

· A good team-worker

· Good written and verbal communication skills

· An analytical mind with the ability to create source code.

· Up to date knowledge of IT Security hardware, software and solutions

· Practical experience using computer operating systems such as MS Windows, UNIX/Linux

"Employment Equity Policy Requirements may be applicable"