Cybersecurity Specialist

We are seeking an accomplished Cybersecurity Specialist to play a pivotal role in the security of our systems, applications, and business processes. As a key member of the organisation, you will be responsible for evaluating complex security architectures, conducting thorough risk assessments, and providing expert security guidance to ensure the resilience of our systems.

This strategic role requires a strong communicator and seasoned collaborator who can effectively work with various teams, including development, operations, and business teams, to align security practices with business objectives and enhance the overall security posture, ensuring compliance with regulatory requirements.

• Performing comprehensive security reviews for applications, cloud environments, and infrastructure.
• Conducting advanced threat modelling, identity and access reviews, security risk assessments, and providing actionable recommendations to mitigate identified risks.
• Providing specialist advice on secure design principles and best practices.
• Assessing and validating security controls in alignment with industry frameworks (NIST, ISO 27001, CIS, etc.).
• Supporting security incident response efforts by providing technical expertise and remediation guidance.

As a cybersecurity specialist, you will be responsible for assessing and mitigating potential security risks, developing and implementing effective security strategies, and collaborating with cross-functional teams to ensure robust security measures are in place.

• A bachelor's degree in Cybersecurity, Information Security, or other related field.
• At least five years' demonstrated work experience in cybersecurity, with a focus on security architecture, risk assessment, or security consulting.
• Industry certifications such as CISSP, CISM, CCSP, SABSA would put your application at an advantage.
• A strong understanding of on-premise, cloud security (AWS, Azure, GCP) and enterprise security architectures.
• Hands-on experience with threat modelling, security reviews, and risk assessments.
• Familiarity or qualification/Certification in security frameworks and compliance requirements (e.g., NIST, VPDSS, ISA 62443, CIS, ISO 27001).
• Proficiency in evaluating and implementing security controls for applications, networks, and infrastructure for Enterprise IT and Operational Technology (OT).
• Knowledge of penetration testing, vulnerability management, and security automation.
• Experience working in a DevSecOps environment is preferred.
• Experience with advanced security solutions and zero-trust architectures.

Candidates should also be able to obtain security clearance as needed.