ICT Security Analyst

JOB PURPOSE

Under the direction of the Chief Information Officer, the ICT Security Analyst is responsible for planning, designing, building, testing, implementing, and maintaining information security systems within the Tourism Product Development Company (TPDCo) information system infrastructure, and will serve as a resource for cybersecurity related matters for the Ministry of Tourism.

KEY RESPONSIBILITIES

Management

• Design and implement security solutions to protect the organization’s technology systems from cyber threats and attacks.
• Perform security reviews, identify gaps in security architecture, and develop a security risk management plan.
• Ensure that acquired or developed system(s) and architecture(s) are consistent with organization’s cybersecurity architecture guideline.

Technical/Professional

• Develop security policies and procedures to ensure that all technology systems meet industry best practices and compliance standards.
• Ensure Endpoint and Application data security products accurately model threats facing the business.
• Respond to security incidents and coordinate with internal and external stakeholders to mitigate the impact of any security breaches.
• Monitor and analyze security logs, SIEM tools and network traffic and reports to identify potential security breaches and incidents.

KEY COMPETENCIES

• Ability to demonstrate a high level of professionalism and confidentiality.
• Strong analytical and problem-solving skills and good judgement exercise.
• Strong interpersonal skills.
• Good oral and written communication.
• Knowledge of industry cybersecurity regulations and standards (OWASP, SANS, NIST) etc.
• In-depth knowledge of computer malware.
• Thorough understanding of Microsoft’s enterprise technology platform, including Azure, Active Directory, SQL, Office365, and the Windows server and desktop operating systems
• Excellent knowledge of networking technologies.

DESIRED EDUCATION AND EXPERIENCE

• Bachelor’s Degree in Information Technology, Computer Science or closely related field of study, or equivalent qualification.
• Minimum two (2) years working experience in security administration.
• CISSP, CISM, CEH, CISA, Security+ certifications preferred.       
• MCSE/MCSA certifications a plus.
• Experience in cloud services (AWS, Microsoft Azure) a plus.
• Experience in incident response, malware detection and removal.
• Experience in Linux and Windows environments.

OR

• Any combination of qualifications deemed acceptable by the TPDCo.

We thank all respondents, but only short listed persons will be contacted.