Sithembiso Khuzwayo Email & Phone Number

Eastern Cape, South Africa

South Africa

OT Cybersecurity

South Africa

OT Ditigal Products Risk Management in line with ISA/IEC 62443 Standard

Experienced mid-level Cybersecurity Specialist with more than 10 years’ experience in ICT Security and Cybersecurity Management. Proven track record of establishing information security management systems in line with ISO 27001 Standard to protect information assets against cyberattacks in an ever-changing threat landscape.Successfully implemented Cybersecurity controls to remediate major audit findings, improved our incident response preparedness level and gained 60% decrease on Cybersecurity incidents,Implemented OT Asset Management techniques to gain 90% decrease in unidentified devices in OT network. Improved endpoint devices security score by implementing endpoint security tools with Zero trust model and Multifactor Authentication.OT/IT Cybersecurity Strategy, Roadmap and Implementation. OT Cybersecurity Project Management, Cybersecurity reviews, Pen Tests and Vulnerability Management.

Cape Town, Western Cape, South Africa

✓ Development, Review and Implementation of Information Security Policy, Standards, Procedures in line IS 27001 ✓ OT cyber security risks management and Controls implementation, policies, standards, and guidelines. ✓ Cybersecurity Security Risk Management in line with NIST Framework ✓ Develop and Rollout Cybersecurity awareness programmes. ✓ Development of Cybersecurity Architecture and Roadmap in line with ISO 27032 ✓ Incident Management Programme design, testing and rollout.Cybersecurity controls implementation and monitoring ✓ Management of Data Loss Prevention through proper Information Classification policies and controls ✓ Management Reporting and Resources management

Centurion, Gauteng, South Africa

Cybersecurity presales consulting for multiple clients. ✓ Cybersecurity Risk Management as per ISO 27005. ✓ Development of Cybersecurity Architecture and Strategy in line with ISO 27032 and NIST Cybersecurity Frameworks. ✓ Implementation of cybersecurity technologies and Controls. (Next Generation Firewalling, WAF, MFA, Endpoint Security, IPS, MFA Access Control, Software defined Networks) ✓ Management of internal and external vulnerabilities through VM scanning tools, Penetration Testing and Patch Management. ✓ Develop and Conduct IT Security awareness programmes(Cybersecurity, Incident Management, Policies, ICT Acceptable Use, Classification etc.). ✓ Information Security Incident Design, Implementation and Management. ✓ Management of Security Specialists and Engineers Team, Business Planning, Budgets, Operational Planning and monitoring.

Centurion, Gauteng, South Africa

✓ Development of the ISMS Implementation Project Charter/Plan and Business Case as per ISO 27001. ✓ Management of the ISMS Implementation Project as per PMBOK. ✓ Information Security Risk Management as per Enterprise Risk Management Methodology. ✓ Development, Review and Implementation of IT Security Policy, Standards, Procedures as per IS 27001. ✓ Implementation of PCI DSS security controls to obtain certification. ✓ Establishment of security metrices and External Audit Compliance Management. ✓ Implementation of cybersecurity technologies and Controls. (Firewalling, IPS, MFA Access Control, Software defined Networks)

Centurion, Gauteng, South Africa

✓ Development of architectural business case for IT Security Projects. ✓ Project Risk Assessment and security requirements development. ✓ Architectural Cybersecurity design and Implementation according to SAPO Security Policies.✓ Secure SDLC policy establishment and implementation of controls. ✓ Application code reviews and vulnerability management. ✓ Project Management in Information Security projects. ✓ Conduct IT Security awareness programmes within the SAPO.

Pretoria, Gauteng, South Africa

Development and Implementation of IT Security Policy, Standards, Procedures and Systems in line with MISS and Information Systems Security Policy. ✓ Implementation of Auditor General recommendations. ✓ Development of IT related reports according to user requirements. ✓ Project Management in Information Security projects. ✓ Perform risk and vulnerability assessment analysis, Audits, Business Continuity and Quality assurance. ✓ Conduct IT Security awareness programmes within the DEA. ✓ Management of Security Infrastructure and Implementation of Security controls. ✓ Operational Planning and monitoring.

Microsoft Security Technologies: Az 500, Cybersecurity Tools And Techniques, Certification

Activities and Societies: Microsoft Azure Security Design and implement a secure infrastructure on Azure Platform..

Nozomi Networks Certified Engineer (Nnce), Ot/Ito Asset Management, Certification

Activities and Societies: OT Asset Management Nozomi Implementation

Cism, Computer And Information Systems Security/Information Assurance, Certification

Activities and Societies: Information Security Risk Management

Iso 27032, Computer And Information Systems Security/Information Assurance, Certification

Cybersecurity Management

Cobit 5, Computer And Information Systems Security/Information Assurance, Certification

Activities and Societies: Information Security Governance Information Security Management and Governance Framework

Security Coordination And Management, Computer And Information Systems Security/Information Assurance, Certification

Activities and Societies: Security Management Security Risk Management

Iso 27001 Lead Implementer, Computer And Information Systems Security/Information Assurance

Activities and Societies: Establish ISMS in line with ISO 27001

Diploma, Information Technology