Job Description
1. Cybersecurity Operations & Incident Response
- Analyse vulnerability management performance and identify remediation SLA breaches.
- Review endpoint security coverage and health (EDR, DLP, Antivirus).
- Assess configuration compliance against Gold Images and CIS benchmarks.
- Review SOC monitoring, alert handling, incident escalation, and SLA adherence.
- Review and challenge incident response handling and root cause analysis for security control failures.
2. Network & Asset Management
- Validate asset inventories by reconciling CMDB data with active network discovery.
- Review network segmentation and firewall rules for flat network risks and overly permissive access.
3. Governance, Risk & Compliance
- Support CyberTrust Mark readiness through gap assessment and remediation tracking.
- Validate network security controls against CSA 19 requirements.
- Perform independent 2LOD validation of control design, effectiveness, and remediation closure.
- Contribute to security architecture and governance reviews (governance led separately).
- Support audits through technical evidence preparation and control walkthroughs.