Cyber Security Specialist at TalentUp Africa

Job Summary

• We are seeking a highly motivated and talented Cybersecurity Specialist to join our team and support our work with a new client. They will play a crucial role in ensuring our organization’s compliance with stringent cybersecurity requirements and effectively supporting AWS engagements for our clients. This role will involve conducting cybersecurity assessments, implementing security measures, and providing expert guidance to ensure the protection of sensitive data.

Responsibilities:

Conduct Cybersecurity Assessments:

• Assess our organization’s current security posture and identify areas for improvement.
• Evaluate compliance with industry standards such as SOC 2, ISO 27001, HITRUST, and FedRAMP
• Identify and address security gaps and vulnerabilities.

Threat Modeling and Secure Software Development Cycle

• Participate in threat modeling exercises using methodologies like STRIDE and DREAD to identify potential vulnerabilities in AWS environments.
• Work with the development team to implement a secure SSDL, including secure coding guidelines, code reviews, and static code analysis tools.

Implement Security Measures:

• Develop and implement security policies, procedures, and standards.
• Manage security tools and technologies, including firewalls, intrusion detection systems, and encryption solutions.
• Conduct regular security audits and vulnerability assessments

Support AWS Engagements:

• Provide cybersecurity expertise to our clients’ AWS projects.
• Ensure compliance with AWS security best practices and requirements.
• Assist in the development and deployment of secure cloud infrastructure.

Manage Security Training:

• Develop and deliver security training programs to staff members.
• Ensure that all staff members are aware of and comply with security policies and procedures.

Incident Response:

• Develop and implement an incident response plan.
• Investigate and respond to security incidents in a timely and effective manner.

Data Privacy and Protection:

• Implement measures to protect sensitive data, such as Personally Identifiable Information (PII) and Protected Health Information (PHI).
• Ensure compliance with data privacy regulations like GDPR and CCPA.

Client Communication

• Effectively communicate security considerations and best practices to the client and internal stakeholders.
• Maintain clear documentation of security policies and procedures

Required Qualifications:

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field
• 5+ years of experience in cybersecurity or information technology
• Strong understanding of security frameworks and standards (e.g., NIST Cybersecurity Framework, ISO 27001, CIS Controls)
• Expertise in cloud security, particularly AWS security best practices
• Certifications such as CISSP, CISM, CISA, or AWS Certified Security - Specialty are nice to have
• Knowledge of programming languages and scripting (e.g., Python, PowerShell)
• Knowledge of security tools and technologies (e.g., firewalls, intrusion detection systems, encryption)
• Strong analytical and problem-solving skills
• Excellent communication and interpersonal skills