IT Security Operations Administrator

Location: Lusaka, Lusaka Province, zm

Company Description

Standard Bank Group is a leading Africa-focused financial services group, and an innovative player on the global stage, that offers a variety of career-enhancing opportunities – plus the chance to work alongside some of the sector’s most talented, motivated professionals. Our clients range from individuals, to businesses of all sizes, high net worth families and large multinational corporates and institutions. We’re passionate about creating growth in Africa. Bringing true, meaningful value to our clients and the communities we serve and creating a real sense of purpose for you.

Job Description

To provide day-to-day operational cybersecurity support across the bank's infrastructure, network, endpoint, and security platforms. The role is responsible for monitoring security events, administering security technologies, supporting vulnerability remediation, maintaining security compliance, and assisting with the implementation of information security projects and controls. This role will act as the first line of security operations support while escalating complex incidents and risks as required. 

Key Responsibilities

1. Security Monitoring & Incident Response

• Monitor security alerts generated by Microsoft Defender, SIEM, NAC, firewalls, and other security platforms.
• Investigate and triage security incidents.
• Escalate critical incidents to the Infrastructure Security Specialist.
• Maintain incident records and support post-incident reviews.
• Assist with cyber threat investigations and forensic activities.

2. Security Platform Administration

• Administer and maintain:
  • Microsoft Defender for Endpoint
  • Network Security
  • Cato Networks SASE
  • Fortinet and Check Point security solutions
  • Vulnerability scanning tools
  • Email security platforms
• Support deployment of security patches and updates.
• Monitor platform health and availability.

3. Vulnerability & Patch Management

• Conduct vulnerability assessments.
• Work with Infrastructure and Application teams to remediate findings.
• Track remediation progress.
• Support monthly patch compliance reporting.
• Validate security updates and patches.

4. Network Access Control Administration

• Manage onboarding and lifecycle of endpoints in Portnox Clear.
• Support policy enforcement and exception handling.
• Investigate access control violations.
• Assist with certificate deployment and endpoint profiling.

5. Security Governance & Compliance

• Support ISO 27001 compliance activities.
• Assist with audit requests and evidence gathering.
• Maintain security documentation and operational procedures.
• Support regulatory and Group security reporting requirements.

6. Security Projects Support

• Assist with implementation of new security technologies.
• Participate in security testing and UAT activities.
• Support rollout of Group cybersecurity initiatives.
• Maintain project documentation and status updates.

7. Security Awareness

• Provide basic security awareness guidance to staff.
• Assist with phishing campaigns and awareness programs.
• Support security communication initiatives.

Qualifications

Type of Qualification: First Degree
Field of Study: Information Technology or any related degree

ZAQA Certified Grade 12 results with minimum of 5 credits.

Experience

• 1 to 3 years in Cyber Security, Network Security, Infrastructure Support, or Information Security.
• Experience with:
  • Microsoft Defender
  • Windows Server
  • Active Directory
  • Network Security
  • Firewalls
  • Vulnerability Management
  • Endpoint Security

Technical Skills

• Microsoft Defender for Endpoint
• Active Directory
• Windows Server Administration
• Network Security
• TCP/IP and Routing Concepts
• Vulnerability Management
• Firewall Administration
• PowerShell Scripting
• Security Monitoring
• Incident Response

Additional Information

Key Deliverables / KPIs

• Security incidents responded to within SLA.
• Monthly vulnerability remediation targets achieved.
• Patch compliance maintained above agreed threshold.
• NAC onboarding and policy enforcement success rate.
• Timely closure of audit findings.
• Completion of assigned project deliverables.
• Accurate monthly security reporting.

The following certifications will be added advantage:

• Security+
• CEH
• Microsoft Security Administrator
• SC-200
• SC-300
• CompTIA Network+
• Fortinet NSE
• Check Point Security Administrator
• ISO 27001 Foundation