Senior Specialist: Cyber Prevent

SUMMARY:
Our client in the telecoms sector is seeking a Senior Specialist: Cyber Prevent on a contract duration of 12 months. 

Role purpose: The primary purpose of the role is to manage and support Cyber Prevent operations across
products, services and technology environments under the direction and supervision of the Manager: Cyber Prevent. The role provides preventative cyber security assurance, identifies and manages material risks, supports control compliance and reporting, and coordinates assigned activities within strategic security programmes across business units and markets. In performing this role you will:

• Identify cyber security risks in new and changed products, services, applications and technology solutions, and define preventative controls to avoid, reduce or mitigate those risks;
• Review solution designs and control implementation to confirm that security requirements are embedded during design and build;
• Provide security assurance before go-live by validating that required controls are implemented, evidenced and aligned with clients security requirements and applicable laws;
• Assess cyber security risks arising from material changes to live products, services and technology environments, and track agreed remediation actions; and
• Ensure security risks, access, data, infrastructure and control obligations are addressed when products, services or technology components are decommissioned.

POSITION INFO:
Core competencies, knowledge and experience: Three-year technical diploma or degree in Information Security, Computer Science, Engineering or a related discipline. Relevant industry certification. CISSP is strongly preferred; CCSP, OSCP, CISM, CISA or equivalent certifications will be SABSA, TOGAF or other security architecture qualifications are advantageous. Minimum of five years' experience in a cyber security role, including responsibility for governance, risk, assurance or preventative security controls. Knowledge of recognised technology management and compliance frameworks, including ISO\/IEC 27001, NIST CSF, ISF, PCI DSS, OWASP and SANS. Strong understanding of technology security risks, preventative controls, risk treatment and evidence-based assurance. Experience across at least three security domains, including security assessment and testing, software development security, governance and risk management, security architecture and engineering, network security, identity and access management, security operations or asset security. Experience managing or coordinating cyber security programmes, workstreams or control-improvement initiatives across multiple stakeholders or markets under defined governance and management oversight. Experience in KRI management, management reporting, data quality and workflow or reporting automation. Experience managing vendors, security deliverables, contractual dependencies and commercial performance Strong executive stakeholder management, written communication, presentation and escalation-management capability. Knowledge of Windows and Linux security, cloud and container technologies such as AWS, GCP, Azure, Docker and Kubernetes, and developer tooling such as GitHub and dependency-management platforms is advantageous. Ability to deliver under time, resource and operational pressure while maintaining quality and governance discipline. Ability to influence and collaborate across technical, business, market and executive stakeholders without relying on direct authority. Customer-focused, responsive, transparent and outcome-driven approach.