Specialist: Information System Security
State Information Technology Agency
Coastal Regions (Western Cape, Northern Cape, Eastern Cape)
Apr 2024 — Present
- Conducted comprehensive risk assessments and vulnerability evaluations across public-sector infrastructure, aligning findings to ISO/IEC 27001 and NIST frameworks.
- Led physical security assessments, business impact assessments (BIA), and resilience evaluations for departments and municipal entities.
- Developed and implemented BC/DR plans, policies, and strategies to ensure operational continuity within regulated environments.
- Delivered cybersecurity awareness programs and training sessions to technical and non-technical stakeholders.
- Produced executive-level security posture, risk, and compliance reporting with actionable recommendations for leadership.
- Managed incident response activities, overseeing containment, remediation, and post-incident improvements.
- Designed internal security applications using Laravel and Pest testing to automate assessments and improve visibility.