Capacity Africa is looking for a dynamic Cyber Security Specialist (CSS) to join the Information Management team to assist the business in executing the digitilisation strategy while mitigating risk. The successful candidate is expected to have an in-depth knowledge of IT, from the end user to the perimeter of the local environment. The CSS should keep abreast with trending, internal and external treats, risks, vulnerabilities, etc in both the Information Technology and Operational Technology environments.

Responsibilities:
• To carry out technical vulnerability assessments of IT systems and processes, identifying potential vulnerabilities, to make recommendations to control any risks identified and to ensure they are implemented.
• To respond rapidly and effectively to IT security incidents, managing them in a professional manor including computer forensics for evidence gathering and preservation.
• To be responsible for the coordination of regular Information Security Reviews by conducting assessments systems, processes and infrastructure and making recommendations to minimize risks identified.
• To work with the governance team and provide input to ensure that policies and procedures for Information Security are effective are adhered to. To be proactive in making recommendations for updates to policies & procedures as required.
• To provide high quality Information Security guidance documentation and training.
• To lead and advice on best practice to service managers, domain architects and staff at all levels.
• To provide high quality guidance and assistance to departmental staff in projects with challenging information security requirements. Provide recommendations and suggestions to internal project teams of industry best practices related to cybersecurity policies and procedures, business continuity, change management, risk identification, and risk mitigation.
• Support the development of policy white papers and briefings to keep Management, customers, and colleagues abreast with relevant, emerging policies and guidance.
• Draft correspondence about Cyber Security training, guidance, strategic Information Technology plans and updates.
• To oversee the information security risks register and carry out actions to mitigate risks identified.