Monitoring – Conduct continuous scanning and Security monitoring of all IT cyber security domains. (i.e. networks, firewalls, anti-virus, mobile devices, patch management). Ensure regular updating of network anti-virus, and monitoring for the presence of spyware, malware and greyware software. Monitor the governance aspects related to the Security to ensure the standards are maintained. Perform continuous threat and vulnerability management monitoring. Monitor policies and procedures related to ICT Security. Assist with analysing and assessing potential security risks, developing plans to deal with such incidents by putting measures in place such as firewalls and encryption, monitoring and auditing systems for abnormal activity. Make recommendations based on various monitoring outputs to improve the security posture of the organization. Conduct continuous scanning and security monitoring of all IT cyber security domains. Monitor IT security functions for compliance with policies, processes and standards. Prepare IT security reports for submission to the Integrated Security Forum. 

Investigations  & Cyber Security– Investigate security incidents/events to ensure that IT security posture remains intact. Provide support to forensic investigation as required. Operate and control the Information Security Management System (ISMS) in line with KING3 and ISO 27000. Participate in the execution of key information security projects. Conduct information gathering on internal and external security intelligence for investigation into security incidents. Write incident reports and submit to the Manager. Ensure adherence to good information security practice. Monitor the implementation of security systems/tools/applications/measures by internal and external suppliers to ensure that the required standards are maintained. Ensure that Business Continuity risks related to cyber security are addressed and mitigated.

Stakeholder Relations Management– Maintain constructive and productive stakeholder relations across the business, and with vendors and relevant external parties to support collaboration and alignment. Manage outputs by third-party suppliers to ensure the required performance and optimum value. 

Governance, Compliance, Risk Management & Reporting – Participate in the development, implementation and management of organisation-wide ICT security processes, standards and protocols. Participate in the development and maintenance of a governance and accountability framework for civil aviation cyber security. Ensure compliance with all IT policies, procedures and standards relating to IT security systems. Assist in the management of configuration and change control records with regards to IT security systems activities. Develop metrics that allows the enterprise to measure the effectiveness of security controls. Ensure and report on IT DRP conducted with business as well as make recommendations for continuous improvement Assist in the development and review of current disaster recovery management plans. Assist in conducting high level security audits and in auditing IT risk. Ensure compliance with relevant regulation and legislative requirements including POPIA, GDPR, and ECT. Participate in the identification of key IT security risks across the business for raising in applicable forums. Train all users on applicable IT compliance and governance requirements. Compile and submit all required reports (internal and external) to ensure compliance with relevant governance requirements