Cyber Security Specialist; Cyber Prevent

We’re recruiting for the position of Cyber Security Specialist (Cyber Prevent). The primary purpose of the role is to manage and support Cyber Prevent operations across the company’s products, services and technology environments under the direction and supervision of the Manager:
Cyber Prevent. The role provides preventative cyber security assurance, identifies and manages material risks, supports control compliance and reporting, and coordinates assigned activities within strategic security programmes across business units and markets. (12 month contract role based in Cape Town).

Duties and Responsibilities:

• Identifying cyber security risks in new and changed products, services, applications and technology solutions, and defining preventative controls to avoid, reduce or mitigate those risks
• Reviewing solution designs and control implementation to confirm that security requirements are embedded during design and build
• Providing security assurance before go-live by validating that required controls are implemented, evidenced and aligned with organisational security requirements and applicable laws
• Assessing cyber security risks arising from material changes to live products, services and technology environments, and tracking agreed remediation actions
• Ensuring security risks, access, data, infrastructure and control obligations are addressed when products, services or technology components are decommissioned
• Supporting delivery of the Cyber Prevent strategy, control-maturity improvements and risk-reduction initiatives across assigned business units
• Monitoring assigned activities against agreed outcomes, escalating material risks and blockers to the Manager:
  Cyber Prevent, and supporting the protection of infrastructure, services and customer data from cyber threats
• Collaborating closely with business, cyber security, Technology and IT stakeholders across the Group and operating companies to help ensure preventative controls are consistently understood, implemented and evidenced across markets
• Managing Cyber Prevent operations, planning, prioritisation, delivery governance and performance across assigned business units and markets
• Managing KRI data quality, reporting and automation under agreed governance, providing accurate management information, trend analysis and timely escalation of control weaknesses, risks and delivery blockers
• Providing preventative cyber security assurance, guidance and decision support to strategic programmes, projects, products and services throughout the delivery lifecycle
• Translating organisational policies, standards and control requirements into practical requirements, guardrails, security patterns and acceptance criteria
• Managing assigned cyber security assessment governance and quality-assurance activities, including planning, evidence review, recommendations, exceptions and remediation tracking, under the oversight of the Manager:
  Cyber Prevent
• Identifying material cyber security risks, agreeing proportionate treatment plans with accountable owners, and tracking remediation, exceptions and residual-risk acceptance to closure
• Managing assigned CHARM compliance activities, control evidence, technology alignment and the tracking of control gaps and overdue actions under agreed oversight
• Supporting Dev Sec Ops  security enablement by helping to embed preventative controls into agile delivery, engineering practices, CI/CD pipelines and developer tooling
• Providing technical subject-matter expertise, executive decision support and escalation management for complex or high-risk cyber security matters
• Managing vendor engagement, security deliverables, commercial dependencies and contract performance with procurement, legal and accountable business owners
• Partnering with Security Architecture, Cyber Defence, Identity, Cloud Security, Technology Risk, Privacy, Audit and delivery teams to resolve cross-functional dependencies
• Co-ordinating and supporting the Cyber Prevent community across markets, promoting consistent ways of working, knowledge sharing, capability uplift and adoption of common controls
• Managing assigned deliverables and providing co-ordination support across strategic initiatives including AI security, Dynamic Trust, SD-WAN, PAM, DLP, IAM and cloud security
• Contributing to control-maturity improvements, automation and reusable security guidance to improve consistency, delivery speed and visibility of preventative security outcomes
• Providing peer support,…