ICT Security Administrator (24 Months Contract)

National Diploma in information technology, Computer Science, Cybersecurity, Information Systems or related field, Degree will be an added advantage. Cybersecurity certifications (often advantageous or required), such as: o Microsoft SC-200 Security Operations Analyst o Microsoft SC-300 Identity and Access Administrator o CompTIA CySA+ o Certified Ethical Hacker (CEH) Document Reference HCM.ADV 001.1 Public Document Page 3 of 4 Advertisement Private Bag X097, Pretoria, 0001 Tel: + 27 (0) 12 367 6000 www.weathersa.co.za USSD: *120*7297# o Fortinet NSE/FortiGate Certification Minimum 3 years' experience in ICT infrastructure, ICT operations, cybersecurity, systems administration or network administration.

Strategy and Policy Compliance Support the implementation and execution of the ICT Security Strategy. Monitor compliance with POPIA, the Cybercrimes Act, ISO 27001, King IV, and applicable government regulations. Assist with the review, maintenance, communication, and implementation of information security policies, standards, procedures, and guidelines. Support internal and external audit activities by providing required information, documentation, and audit evidence. Maintain cybersecurity risk, compliance, and audit registers. Track audit findings, corrective actions, and remediation activities to closure. Support cybersecurity risk assessments and monitor mitigation actions. Security Operations and Threat Management Administer and monitor cybersecurity technologies, including firewalls, endpoint protection, anti-malware solutions, intrusion detection and prevention systems, secure email gateways, SIEM platforms, and cloud security tools. Monitor and analyse security alerts, logs, and events generated by security systems. Investigate suspicious activities and security events in accordance with approved procedures. Identity and Access Management Administer Active Directory, Microsoft Entra ID, and related identity management platforms. Provision, modify, suspend, and revoke user access based on approved requests. Perform user onboarding, transfer, and termination activities in accordance with approved procedures. Manage and maintain privileged user accounts and access records. Administer Multi-Factor Authentication (MFA) and Conditional Access policies Document Reference HCM.ADV 001.1 Public Document Page 2 of 4 Advertisement Private Bag X097, Pretoria, 0001 Tel: + 27 (0) 12 367 6000 www.weathersa.co.za USSD: *120*7297# Vulnerability and Security Configuration Management Conduct approved vulnerability scans on servers, endpoints, network devices, cloud services, and applications. Monitor, record, and track identified vulnerabilities and remediation actions. Support vulnerability assessments and remediation activities across ICT environments. Business Continuity and Cyber Resilience Support Disaster Recovery and cyber resilience initiatives. Support periodic reviews of cyber recovery readiness and recovery capabilities. Participate in Disaster Recovery planning and testing activities. Execute approved cyber recovery and disaster recovery procedures when required. Monitor and review backup security controls and backup protection measures Security Awareness and Training Support the implementation of cybersecurity awareness programmes and campaigns. Coordinate and facilitate user awareness initiatives and awareness events. Cybersecurity Reporting Produce monthly operational cybersecurity reports and dashboards. Compile and maintain cybersecurity performance statistics and metrics. Report on security incidents, vulnerabilities, patch compliance, access reviews, awareness activities, and remediation progress. Maintain cybersecurity records, evidence repositories, and reporting databases. Monitor and report cybersecurity operational trends and recurring issues.

recruitment.weathersa.co.za