IT Risk Analyst

Responsibilities:

• Plan, coordinate, and oversee intelligence-based cyber and information security penetration testing assessments (simulated cyber-attacks) across banks, insurance companies, and market infrastructures.


• Develop project methodologies for the use of external consultants to perform simulated cyber-attacks on the financial sector.


• Create and maintain TIBER frameworks, methodologies, standards, and guidelines to assess the resilience of the sector.


• Gather threat intelligence from various sources, prioritize cyber requirements, and report on the cyber threat landscape and status.


• Collaborate with internal and external teams to achieve cyber resilience objectives and maintain strong industry relationships.


• Stay informed of developments and changes in information security risk management and analyze their impact on the industry.

Requirements:

• Postgraduate degree (NQF 8) in Information Technology/Security.


• Relevant Security Certification (CEH, CISM, CISSP) is an advantage.


• 5-8 years of experience in Information Technology, with at least 4 years in Cyber and Information Security.


• Experience in the banking or financial sector is preferred.