SOUTH AFRICAN SPECIAL RISK INSURANCE ASSOCIATION (SASRIA) VACANCIES

​CLOUD SECURITY ENGINEER
 
Details
Closing Date 2025/05/06
Reference Number SAS250417-1
Job Title Cloud Security Engineer
Job Type Permanent
Division Business Change and Technology
Department IT GRC
EE Occupational Levels Level 6: Specialists
Location - Town / City Sandton
Location – Province Gauteng
Location – Country South Africa
 
Job Advert Summary
The candidate is part of the Cybersecurity function in the organisation mandated to actively protect Sasria’s information and technology assets from external or internal threats; ensuring compliance with statutory and regulatory requirements regarding information access, security and privacy. The role is responsible for analysing security requirements for Sasria cloud environments, implementation and integrations of technological solutions dedicated to data protection in cloud or hybrid environment and full management of the identity and access management for both cloud and on-premise infrastructure; applications and customers.

​Minimum Requirements
 
Qualifications
A relevant diploma/degree in Information Communication Technology at NQF level 5/6 as recognized by SAQA.
 
Experience

• Microsoft Office 365 Administration and Security
• Microsoft Azure Security
• Active Directory Administration and Security
• General Security Administration
• Access Management

 
Duties and Responsibilities
 
Key Performance Area and Tasks
 
1. Cloud Security

• Continuous identification of security gaps in the cloud environments and implementation of remediation actions.
• Know, manage and monitor IT Security Solutions (SIEM, Cloud Access Security Broker, Data Leakage Prevention, Web Application Firewall, Multi Factor Authentication, Data Rights Managements, Data Classification etc).
• Understand and facilitate cloud security capabilities and possible interfaces with on-prem security solutions.
• Use industry standards, guidelines, and regulatory compliance requirements related to information security and cloud computing such as GDPR, ISO 27001, Cloud Security Alliance, NIST 800-53, PCI DSS for effective management of risk

 
2. IT Security Operations

• Support the IT team on daily tasks which includes but not limited to prioritization, investigation and troubleshooting of IT security incidents.
• Support the IT Security team in ensuring authorized access by monitoring network activities and reporting violations.
• Process security requests ensuring confidentiality, integrity and availability of information.
• Analyse problems, recommend solutions, products, and technologies to meet business security and information security objectives. Ensure adherence to approved ICT Governance principles and policies.
• Identification of vulnerabilities and remediation

 
3. Change and Configuration Management

• Assist in implementation of security configuration controls.

 
4. Reporting

• Support in creation of IT Security reports as per set metrics and KPIs.

 
5. Processes and continuous improvement

• Continuous reflection of IT Security processes and recommendations of improvements.
• Enjoy staying on top of cyber security trends and incorporate best practices into daily work.

 
6. User Support

• Provide support on open issues (e.g. customer logged tickets, incidents, projects etc.)
• Assist in incident response for any breaches, intrusions, or theft.

 
7. Ad hoc tasks

• Assist in fulfilment of Ad hoc tasks as requested by team members.
• Perform security research and document and communicate the findings of their research.
• Influence technical discussions and decisions

 
 
Policy
We are committed to Employment Equity when recruiting internally and externally. It is company policy to promote from within wherever possible. Therefore, please be aware that internal candidates will be considered first before reviewing external applicants, provided that this supports achievement of our Employment Equity goals.
 
PLEASE APPLY HERE