Specialist: Cyber Security

In brief

**Overview** This role is for a Specialist in Cyber Security at the Border Management Authority (BMA). The successful candidate will be responsible for developing, implementing, and continuously improving the BMA’s cybersecurity capabilities across various domains, including operations, identity and access management, threat detection, incident response, and cyber resilience. The position involves protecting the organisation's information assets, systems, networks, cloud platforms, and digital services against cyber threats, while also providing specialist guidance and managing cybersecurity projects and stakeholder relationships. **What you will do** The successful candidate will be expected to perform the following duties and responsibilities: * **Cybersecurity Operations** * Develop, implement, and continuously improve the BMA’s cybersecurity operations capability to protect information assets, systems, networks, cloud platforms, and digital services against cyber threats. * Administer, monitor, and optimise operational cybersecurity technologies, including endpoint security, email security, network security, cloud security, and related technical symbols. * Implement and maintain security configuration baselines, technical hardening standards, and secure configuration requirements across ICT infrastructure, operating systems, cloud platforms, and business applications. * Review cybersecurity configurations for new systems, infrastructure changes, and technology implementations to ensure alignment with approved security standards and organisational requirements. * Develop and maintain cybersecurity operational procedures, technical standards, implementation guides, and supporting documentation. * Provide specialist cybersecurity guidance to ICT teams, business units, and project teams on operational security risks, controls, and mitigation measures. * Coordinate vulnerability remediation with ICT infrastructure, application, and service owners. * Review security logs, alerts, and configuration reports from operational cybersecurity tools to identify control failures, misconfigurations, and areas requiring corrective action. * Support patch management and secure maintenance activities by validating that critical systems, endpoints, and security technologies are updated in line with approved security requirements. * **Identity and Access Security** * Develop, implement, and continuously improve the organisation’s Identity and Access Management capability. * Design, implement, and maintain identity and access security controls, including authentication, authorisation, multi-factor authentication, role-based access control, privileged access management, and adaptive access controls. * Implement and maintain Identity Governance and Administration processes for the provisioning, modification, recertification, and de-provisioning of user, privileged, service, and third-party accounts. * Administer enterprise identity services, directory services, authentication mechanisms, and access control technologies. * Monitor identity-related security events, authentication risks, and anomalous access activities. * Provide specialist advice on identity architecture, authentication mechanisms, and access control requirements for new ICT solutions, projects, and technology implementations. * Maintain technical documentation, operational procedures, and standards relating to identity and access security technologies. * **Threat Detection, Incident Response and Cyber Resilience** * Develop, implement, and continuously improve the organisation’s cybersecurity monitoring and incident response capability. * Monitor the organisation’s ICT environment for cybersecurity threats, malicious activity, and indicators of compromise. * Coordinate and manage cybersecurity incidents throughout the incident lifecycle. * Conduct technical investigations into cybersecurity incidents, analyse root causes, and recommend corrective and preventive actions. * Coordinate or support digital forensic investigations. * Develop, maintain, and periodically review the Cybersecurity Incident Response Plan, incident response playbooks, escalation procedures, and communication protocols. * Coordinate and participate in cybersecurity incident simulations, tabletop exercises, and cyber resilience testing. * Support cyber recovery and ICT disaster recovery planning, testing, and improvement. * Develop operational dashboards and management reports on cybersecurity incidents, threat trends, response performance, and organisational cyber resilience. * **Cybersecurity Programme Delivery** * Develop, implement, coordinate, and monitor cybersecurity projects and initiatives. * Provide specialist cybersecurity input into ICT projects, solution designs, technology acquisitions, and procurement activities. * Develop cybersecurity technical specifications, standards, and security requirements for various ICT components. * Evaluate cybersecurity technologies and solutions and provide recommendations on suitability, technical capability, security effectiveness, integration requirements, and alignment with organisational needs. * Support cybersecurity procurement processes by reviewing technical proposals, validating compliance with security requirements, and contributing to bid evaluation activities. * Manage cybersecurity vendors, managed security service providers, and technology partners. * Track cybersecurity programme risks, issues, dependencies, milestones, and deliverables. * Develop, monitor, and report cybersecurity Key Risk Indicators, Key Performance Indicators, and operational metrics. * **Stakeholder Management** * Build and maintain effective working relationships with internal business units, ICT teams, governance structures, service providers, and relevant external stakeholders. * Provide specialist cybersecurity advice, technical guidance, and recommendations to management, ICT teams, project teams, and business stakeholders. * Coordinate cybersecurity-related inputs, updates, and follow-ups with stakeholders. * Promote cybersecurity awareness, responsible technology use, and a strong security culture. **Requirements (from the original advert)** * **Minimum Qualifications:** * Matric Grade 12 * Undergraduate qualification at NQF 7 as recognised by SAQA in Computer Science, Information Technology or equivalent * A recognised vendor-neutral entry-to-intermediate level cybersecurity certification, or equivalent, will be an added advantage, including ISO 27001, Security +, CySA +, etc. * **Minimum Experience:** * 5 Years working experience within a Cyber/IT Security role. * **Knowledge:** * Cybersecurity governance and strategy * Identity and Access Management * Security Operations Centre * CIS Controls * Zero trust principles * ISO 27001 * Border Management Authority, 2020 * **Other requirements:** * Flexibility in working hours will be required to meet demands of the role. * May be required to work overtime. * Valid driver’s License **Who should apply** This role is ideal for an experienced cybersecurity professional with at least 5 years of practical experience in a cyber/IT security role. The candidate should possess a strong technical background in cybersecurity operations, identity and access management, incident response, and programme delivery, coupled with an undergraduate qualification in Computer Science or IT. Key knowledge areas include cybersecurity governance, ISO 27001, CIS Controls, and Zero Trust principles. The successful applicant must be adaptable, willing to work flexible hours and overtime, and hold a valid driver's license, demonstrating a commitment to protecting organisational assets and managing stakeholder relationships. **Deadline** Not specified **Reference** Original posting: https://www.myjobmag.co.za/job/specialist-cyber-security-border-management-authority Source: myjobmag

Summary drafted with AI assistance from the original advert. The advert itself is the authority — how we use AI.

Job description

Before you apply

• Confirm the requirements and closing date on the original listing (myjobmag). SPANi lists vacancies from other sites and may not reflect last-minute changes.
• Legitimate employers do not charge application, registration or training fees.
• Don't send your ID or bank details before you have confirmed the employer is real.

How to spot a job scam

Before you apply

• Read the full advert and confirm you meet the minimum requirements before applying.
• Tailor your CV headline and most recent experience to the job title and key skills.
• Note the closing date and reference number, and keep a copy of what you submit.
• Apply only through the employer or job board link — never pay to apply.