Cyber Security Risk Analyst - South African Reserve Bank

The main purpose of this position is to research and analyse the cyber security landscape to ensure cyber threats to the South African Financial sector are known and adequately managed by the respective institutions.    

Detailed description

The successful candidate will be responsible for the following key performance areas:

• To develop cyber frameworks/standards and guidelines for adoption across the industry.
• Apply appropriate analytical techniques, methodologies and technologies to meet the research objectives. 
• Produce intelligence outputs to provide an accurate depiction of the current threat landscape and associated risk. 
• Liaise with key internal and external stakeholders regarding current and developing cyber threats. 
• To plan and coordinate intelligence-based CIS (cyber and information security) penetration testing assessments (advanced simulated cyber-attacks) across the sector i.e. Banks, Insurance, and Market Infrastructures.
• To develop project methodologies for external consultants to perform advanced simulated cyber-attacks on the financial sector. 
• Identify, collect, collate, analyse and document cyber security threats to the financial sector using threat intelligence feeds from multiple sources. 
• Plan and prioritise work in conjunction with team lead and other stakeholders. 
• Conduct ongoing research into legislative and best practice cybersecurity requirements.
• Review risk and threat information in order to identify applicable gaps in the industry. 

Qualifications

To be considered for this position, candidates must have:

• A minimum of a Postgraduate qualification (NQF 8) in Security, Information Technology or an equivalent relevant qualification. 
• At least eight years’ experience in an Information security or IT Risk / cybersecurity governance environment.
• Solid knowledge of risk management, compliance and Information security governance.
• Have exposure to cyber risk frameworks. 
• Be familiar with relevant legislation.
• Understanding of Cyber Risk Trends.
• Knowledge of leading cyber / information security best prac

Job-related knowledge

• Relevant security certification, such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified in Risk and Information Control (CRISC) Certified in Risk and Information Control (CRISC), Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OSCP)  or Certified Information Systems Auditor (CISA) will be an added advantage. 
• Problem-solving and analysis. 
• Planning and organising.
• Verbal and written communication.
• Team work.
• Impact & influence. 

Job-related skills and attributes

• Solid knowledge of risk management, compliance and Information security governance.
• Have exposure to cyber risk frameworks. 
• Be familiar with relevant legislation.
• Understanding of Cyber Risk Trends.
• Knowledge of leading cyber / information security best practices.