Picture
 
PASSENGER RAIL AGENCY OF SOUTH AFRICA (PRASA)
 
JOB TITLE: ICT Risk and Security Specialist (12 months Contract)
SALARY GROUP: Senior Management 
LOCATION: PRASA Corporate
DEPARTMENT: Group ICT 
POST NUMBER: TBA 
REFERENCE: R&S/ICTRASS/GICT/226
 
DEPARTMENTAL MISSION: To provide expert ICT security services to safeguard the organization’s ICT resources.
 
 
OUTPUTS:
Manage IT Security Enhancement Projects
• Analyse and design identity and access management solutions for the current and future PRASA environment
• Consolidate business requirements and develop proposed system designs
• Develop SCM specifications for the following areas (min, not limited to):
  • Information security management and operation; and
  • Identify management and access control.
• Provide technical advisory services during the evaluation and contracting phases.
• Manage the implementation (s) of the chosen system (s).
• Provide technical oversight during the initial months of the project.
Information Security management and operations
• Design requirements for information security operations capabilities
• Implement and monitor security operations capabilities
• Review operations and implement improvements
• Implement cyber security operations services, including a security operations centre that will monitor PRASA cyber security events, offences and provide alerts
 
 
Identity Management and Access Control
• Define and allocate all information security roles and responsibilities within PRASA Group
• Define and implement segregation of duties in business processes and related systems.
• Implements access control monitoring framework and mechanism.
• Establishes, documents, implements and reviews an access control policy based on business and information security requirements.
• Monitor, review and manage user access to the network and systems.
• Develop and implement processes and procedures related to user registration and de-registration.
• Defines and implements identity and access management processes and solutions to mitigate identity and access risk
 
Skill Transfer
• Train identified PRASA ICT staff to perform Security operations and manage identity management access control system and practice
 
KNOWLEDGE:
• Advanced knowledge of Information Security Management and operations
• Advance knowledge of identify management and Access control
• Project management
 
SKILLS: 
• Communication
• Report writing
• Project Management
• IT Security operation and management
• Identify Management
 
ATTITUDES: 
• Pro-active
• Analytical
• Attention to detail Independent
 
CAPABILITIES:
Minimum Requirements:
• B Degree in IT, Engineering, Computer Science (NQF7)
Added advantage
• Certified Information System Security Professional (CISSP)
• Certified Information Systems Auditor
• ISO 27001
• ITIL
• Driver’s license
 
Experience:
• 10 Years’ experience – IT Security
• 7 Years’ experience – Management Consulting
​

​
Please apply by completing an internal application form and submitting this together with your complete CV to: Manager: Recruitment & Selection: PRASA, Private Bag X101, Braamfontein, 2017, Or 1st Floor, 30 Wolmarans Street, Umjantshi House, Johannesburg 0002. 
 
For the attention of: Katleho Musa or e-mail kmusa@prasa.com
 
CLOSING DATE: 18 November 2021
 
Should you not hear from us within three (3) months from the closing date, please consider your application unsuccessful.
 
ISSUED BY SENIOR MANAGER RECRUITMENT AND SELECTION
 
As per PRASA Employment Equity Plan, this position is earmarked as follows:
MALE: Africa, Indian, Coloured, White
FEMALE: African, Indian, Coloured, White