Adjunkdirekteur: Hoofinligtingssekuriteitsbeampte

Oorsig

Pos van Adjunkdirekteur Hoofinligtingssekuriteitsbeampte by die Department of Basic Education in Pretoria, verantwoordelik vir kuberveiligheidsprogramme en die beskerming van IT-infrastruktuur.

Vereistes

• Aansoekers moet 'n NQF-vlak 6 post-matriekkwalifikasie in Inligtingstegnologie/Inligtingstelsels of 'n gelykwaardige kwalifikasie soos deur SAQA erken besit;
• Vier (4) jaar relevante ervaring as 'n Assistentdirekteur of gelykwaardig; 'n Minimum van twee (2) sertifiserings in enigeen van die volgende: ITIL, COBIT, CISA, CISM, CISSP, CRISC, ISO 27001 plus 'n minimum van ten minste vyf (5) jaar se ervaring as 'n Hoofinligtingssekuriteitsbeampte/Inligtingssekuriteitsbeampte;
• Ervaring in die bestuur van netwerke;
• Degelike kennis van Enterprise- of Tegnologie-argitektuuromgewing word vereis, strategiese bestuur, inligtings- en kommunikasietegnologie-stelsels en -prosesse;
• Degelike kennis van Microsoft-omgewing, gevirtualiseerde, wolkomgewings;
• Degelike kennis van besigheidskontinuïteitsbestuur;
• Degelike kennis van die E-regeringstrategie en -padkaart, interaktiewe kommunikasie, probleemoplossing en analitiese dinkoriëntasie, beplannings- en organisasievaardighede, projekbestuursvaardighede, strategiese denke;
• Begrip van organisatoriese inligtingsvloeie en die onderhoud van 'n data-inventaris;
• Begrip van die dataklassifikasieraamwerk en die implementering van kontroles ooreenkomstig die sensitiwiteitsvlakke;
• Kwesbaarheidsbewustheid deur 'n begrip van die kwesbaarheidsopsporings- en bestuursprogram;
• Regstellings en Herstel-SLA's en ooreengekome tydlyne vir die aanspreek van sekuriteitskwesbaarhede; 'n Geldige bestuurderslisensie.

Pligte

• Die suksesvolle kandidaat sal verantwoordelik wees vir die CyberSecurity-program: Ontwerp, konfigureer, ontplooi en onderhou sekuriteitskontroles om die departement se infrastruktuur te beskerm;
• Beskerm aktief die departement se inligtingstegnologie-bates en infrastruktuur teen eksterne of interne bedreigings en verseker nakoming van statutêre en regulatoriese vereistes rakende inligtingstoegang, sekuriteit en privaatheid;
• Analiseer probleme en beveel oplossings, produkte en tegnologieë aan om die organisasie se sekuriteits- en inligtingssekuriteitsdoelwitte te bereik;
• Voer sekuriteitsassessering uit vir alle stelsels en toepassings en kontroleer vir nakoming van kuberveiligheidsstandaarde en -regulasies in projekte en nuwe stelselontwerp-implementering;
• Ontwikkel en interpreter die kuberveiligheidsstrategie en -raamwerk;
• Interpreter kuberveiligheidsvolwassenheidsvlakke en implementeer padkaarte;
• Lei die implementering van best-practice-netwerksekuriteitskontroles oor wolkomgewings en plaaslike platforms om weerstand teen kuberaanvalle te handhaaf;
• Fokus op die veilige aanvaarding van KI-integrasie;
• Databeskerming en -versleuteling: Verseker dat sensitiewe inligting geïdentifiseer en behoorlik beskerm word;
• Ontwikkel of installeer sagteware, soos data-at-rest-versleutelingsprogramme en SSL-sertifikate om sensitiewe inligting in oordrag en in gebruik te beskerm;
• Ondersteun die ontwikkeling van rampreaksie- en herstelstrategieë en die implementering daarvan binne die DBE;
• Los sekuriteits- en netwerkprobleme op om 'n geskikte DR-werf en besigheidskontinuïteitsplanne te handhaaf;
• Netwerk-, web- en eindpuntsekuriteit en monitering;
• Bedreigings- en kwesbaarheidsbestuur: Lei bedreigingslandskap-assessering en situasionele kuberaanval;
• Verseker dat kwesbaarheidsassesserings en penetrasietoetse periodiek uitgevoer word;
• Analiseer en interpreter kwesbaarheidsresultate en fasiliteer die herstel van geïdentifiseerde kwesbaarhede op Volwassenheidsvlakke vir Beskerming en Reaksie in samewerking met ander besigheidstoepassingseienaars;
• Verskaf verslae aan Senior Bestuur oor die kwesbaarheidsbestuursprogram.
• Voorvalreaksie en derdelynondersteuning: Verskaf derdelynondersteuning vir enige inligtingssekuriteitsverwante navrae;
• Hou toesig oor en verskaf gevorderde voorvalreaksie-ondersteuning vir skendings, indringings of datadiefstal;
• Voer Derdeparty-risikobestuur uit: Effektiewe monitering van verskaffersekuriteidsposisies;
• Verseker vinnige herstelvermoëns.
• Lewer Sekuriteitsprojekte binne begroting;
• Verskaf opleiding aan werknemers oor inligtingssekuriteit.

Hoe om aan te sollisiteer

Submitted via post to: Private Bag X895, Pretoria, 0001 or hand-deliver to: The Department of Basic Education, 222 Struben Street, Pretoria or you can email your application to Sechele.O@dbe.gov.za/Segowa.M@dbe.gov.za/Kumalo.N@dbe.gov.za./Sko sana.th@dbe.gov.za Please visit the Department of Education’s website at www.education.gov.za FOR ATTENTION : Ms N Monyela/ Mr M Segowa

Navrae: Ms N Monyela Tel No: (012) 357 3294/ Mr M Segowa Tel No: (012) 357 4291

Notas

Applications must be submitted on the most recently approved Z83 Application for Employment Form, obtainable from the DBE Website or any Public Service Department/Webpage. Use of the old Z83 Form will result in disqualification. The Z83 must be completed in full and page 2 duly signed. A clear indication of the post and reference number that is being applied for must be indicated on your Z83. Applicants are not required to submit copies of qualifications and other relevant documents on application but must submit the Z83 with a detailed Curriculum Vitae (only). Certified copies of qualifications and other relevant documents will be requested from shortlisted candidates on or before the day of the interview. Successful candidates will be subjected to Personnel Suitability Checks (criminal record, citizenship & financial/asset record checks, qualification and employment verification including social media profiles). Appointment is subject to positive results of the security clearance process. The successful candidate will be required to sign an annual performance agreement and, where applicable, annually disclose his/her financial interests. All applicants are required to declare any conflict or perceived conflict of interest, to disclose memberships of Boards and directorships that they may be associated with. Applicants, who do not comply with the requirements outlined above, will not be considered. A Pre-entry Certificate for the Senior Management Service (SMS) (Nyukela Certificate) is required for all SMS appointments; the full detail of the outlined requirements and course information can be sourced by following the link https://www.thensg.gov.za/training-course-SMS-pre-entry programme. All shortlisted candidates for SMS posts will be subjected to a technical exercise and interview. Following the technical exercise and interview, a maximum of three (3) SMS candidates will undergo psychometric assessments to assess cognitive capabilities, behavioural preferences, emotional intelligence, and integrity All shortlisted candidates, including SMS, shall undertake two pre- entry assessments. One must be a practical exercise, and the other must be an Integrity (Ethical Conduct) Assessment. Selection panels shall score both technical exercises as an additional criterion in the interview process Note: Applications must be submitted on the most recently approved Z83 Application for Employment Form, obtainable from the DBE Website or any Public Service Department/Webpage. Use of the old Z83 Form will result in disqualification. The Z83 must be completed in full and page 2 duly signed. A clear indication of the post and reference number that is being applied for must be indicated on your Z83. Applicants are not required to submit copies of qualifications and other relevant documents on application but must submit the Z83 with a detailed Curriculum Vitae (only). Certified copies of qualifications and other relevant documents will be requested from shortlisted candidates on or before the day of the interview. Successful candidates will be subjected to Personnel Suitability Checks (criminal record, citizenship & financial/asset record checks, qualification and employment verification including social media profiles). Appointment is subject to positive results of the security clearance process. The successful candidate will be required to sign an annual performance agreement and, where applicable, annually disclose his/her financial interests. All applicants are required to declare any conflict or perceived conflict of interest, to disclose memberships of Boards and directorships that they may be associated with. Applicants, who do not comply with the requirements outlined above, will not be considered. MANAGEMENT ECHELON