ICT SECURITY SPECIALIST – NAMIBIAN PORTS AUTHORITY

PURPOSE OF THE JOB:

To plan, facilitate and improve the protection of Namport’s Information systems and data from security risks such as cyber threats, to ensure business continuity and optimum availability in compliance to relevant policies and regulations for business success. This role involves implementing security measures, monitoring for potential security breaches, and responding to incidents to minimize damage and ensure the integrity, confidentiality, and availability of information. The position reports directly to the Executive: ICT.

KEY ACCOUNTABILITIES

• Develop, drive, implement, and maintain robust strategies/plans for ICT Security to improve the security landscape for Namport ICT environment and data.
• Identify and implement state-of-the-art technologies from the external ICT ecosystem to add practical value and improve the security landscape of the organisation.
• Stay updated on emerging ICT trends and technologies to ensure the organisation remains at the forefront of cybersecurity.
• Collaborate with various departments to understand their needs and develop and implement appropriate measures to safeguard company data and systems.
• Develop the ICT security policies, standards, and procedures of the organisation and monitor application and compliance thereof.
• Conduct regular risk assessments and vulnerability testing/analyses, and develop risk mitigation strategies to address identified vulnerabilities.
• Design and implement security controls to protect the organisation’s ICT information systems and platforms.
• Lead the response to cybersecurity incidents, including the identification, containment, and recovery from security breaches.
• Monitor, investigate, and report all serious/critical/high potential incidents to identify causes and determine prevention measures, as well as develop and implement medium- and long-term remedial plans to prevent similar occurrences.
• Implement automated tools and processes for monitoring network activity, threat detection, and prevention.
• Establish, design, and present effective approaches to convey cybersecurity data and analytics to inform strategic and operational decision-making.
• Establish and maintain a risk management philosophy and culture within the organisation.
• Develop and deliver security awareness programmes and training sessions to educate employees on cybersecurity risks and best practices.
• Promote a culture of security awareness across the organisation, encouraging the adoption of safe online behaviour and practices.

QUALIFICATIONS & EXPERIENCE

• An Honours Degree [NQF Level 8] in Cyber Security, Information Technology, Information Systems, Software Engineering, Computer Science or equivalent.
• A minimum of five (5) years relevant professional experience in the field of TCP/IP, common networking ports and protocols, traffic flow, system administration, and the OSI model in a corporate environment, of which three (3) years should have been in a supervisory capacity. This includes a strong understanding of defence, in-depth principles and common security elements, as well as hands-on experience in analysing large volumes of logs, network data, and attack artefacts to support incident investigations.
• Certified in CompTIA Security+ or equivalent.
• Certification as Information Security Manager (CISM)/ Cloud Security Professional (CCSP)/ Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), and/or SIEM-specific training and certification are an added advantage.
• Good planning and organisational skills.
• Analytical, creative, innovative, and solutions-oriented.
• Proven experience in driving process improvements and optimizing service delivery workflows.
• Ability to thrive in a dynamic, demanding, and high-performance work environment.
• Advanced project management and computer skills.
• Must be versatile, flexible, and decisive.