Key details

Job Highlight

Requirements

A Grade 12 certificate and NQF 7 qualification in Information Technology/Information Security or Computer Systems as recognized by SAQA. ITIL foundation and COBIT certification and any accreditation (Security+, CISA, CISSP, CISM, CRISK) will be an advantage.

At least three (3) Years of IT experience as Assistant Director or equivalent level as well as supervisory experience.

Experience in an Information Security role, in working with legal audit and compliance staff, developing and maintaining policies, procedures, standards and guidelines as well as experience in information security management frameworks, such as International standards Organization (ISO) 2700x/ the IT Infrastructure Library (ITIL) / Control Objectives for Information & Related Technology (COBIT) frameworks.

Knowledge of ICT Governance, Risk, Security, Compliance and Continuity methodologies and practices, IT Infrastructure Lifecycle Management and ICT Networks (LAN & WAN technologies).

Knowledge of ICT Controls and ICT System Development, Backup, Restore, Disaster Recovery and Archiving.

Knowledge and understanding of relevant legal and regulatory requirements, such as DPSA Corporate Governance of ICT Policy Framework, Cloud Security Policy, Government Wide Enterprise Architecture etc.

Knowledge/Certification on COBIT methodology.

Knowledge of ISO 27000 standard, ISO 22301, ISO 38500 and ISO 31000 will be an added advantage.

Good communication (verbal and written), analytical, project management, policy development, people management, problem solving and decision 38 making, planning and organizing and computer skills (MS office package). A valid driver’s license.

Duties

Provide strategic support in alignment with business goals and management of resources.

Develop, implement, and monitor a strategic, comprehensive departmental information security and IT risk management program to ensure that the integrity, confidentiality, and availability of information is owned, controlled or processed by the department.

Provide ICT security support and maintain compliance with security standards and minimizing of risks.

Manage outsourced vendors that provide information security functions for compliance with contracted service-level agreements.

Provide architecture/engineering support in designing, implementing, and maintaining robust, scalable, and secure systems.

Consult with IT and security staff to ensure that security is factored into the evaluation, selection, installation and configuration of hardware, applications and software.

Provide security liaison role by ensuring that security policies, compliance, and risk management are integrated into all ICT activities.

Assist resource owners and IT staff in understanding and responding to security audit failures reported by auditors.

Manage personnel and various security initiatives/projects to ensure alignment with organizational goals, compliance, and audit.

How to apply

Email: recruitment@health.gov.za

Tip: Many government posts require a completed Z83 form. Download it above and follow the guide.