Summary
Overview
Work History
Education
Skills
Key Competencies
Accomplishments and Achievements
Table Tennis, Rugby and Cricker
Certification
Proficiency Courses Attended
Work Phone
References
Timeline
Generic
Herman Johnson

Herman Johnson

Cyber Security Specialist
Pretoria

Summary

Results-driven IT professional with notable success in mangaging, planning, analysis and implementation of security initiatives.

Experienced corporate security specialist with a proven track record of success in technical security planning, testing, verification, and risk analysis. Skilled in defining, deploying, and monitoring risk management, compliance, and information security programs.

Seeking to resume a career as a successful Information Security Specialist in a major global organization and contribute to the organization’s well-being.

Overview

21
21
years of professional experience
11
11
years of post-secondary education
6
6
Certifications

Work History

Endpoint Security Operations Specialist

South African Reserve Bank
09.2021 - Current
  • Provide security consulting services in support of business programmes.
  • Assist with technical security solution design and definition of new services where required.
  • Enable Cyber Security operational services.
  • Define and implement Cyber Security services and processes
  • Ensure Governance, risk management, compliance and information/knowledge management standards are adhered to and mitigate those findings.
  • Motivated and trained cyber security administrators to maximize team productivity.

ICT Security Engineer

Financial Sector Conduct Authority
09.2017 - 08.2021
  • Implement and administrate network security hardware and software, enforcing network security policy and complying with requirements of external security audits and recommendations.
  • Analyse network security needs and contribute to design, integration and installation of related hardware and software.
  • Analyse, troubleshoot and correct network security problems.
  • Create, maintain, and design network security systems within the organisation IT Network.
  • Provide guidance and implement access control mechanisms for existing network applications and any projects.
  • Conduct and facilitate both internal and external network vulnerability assessments and penetration test across the organisations IT landscape.
  • Coordinated with third-party security information and event management (SIEM) providers to maintain protections and predict threats.
  • Worked with teams to develop company-wide information assurance, security standards and procedures.
  • Installed and maintained commercial firewall solution, working with security vendors to consistently apply best practices and software updates.

Team Leader

Financial Sector Conduct Authority
03.2018 - 01.2019
  • Develops, maintains and administers a sound ICT Security and Cyber security organisational plan; initiates improvements as necessary.
  • Provide strategic security guidance for ICT projects, including the evaluation and recommendation of technical controls;
  • Develop, maintain and publish up-to-date security policies, standards and guidelines, and oversee training and dissemination of security policies and practices;
  • Partner with senior FSCA business leaders to integrate all ICT security and Cyber security plans with FSCA’s information and reporting requirement; and
  • Plan and managed IT Security budget and resources
  • Mentored and guided employees to foster proper completion of assigned duties.
  • Conducted training and mentored team members to promote productivity, accuracy, and commitment to friendly service.

DDS Network Support ICT Security NCO

Defence Intelligence, Directorate Departemental Security
01.2015 - 01.2017
  • Worked as part of a dynamic team responsible for implementing security technologies and testing DOD networks for vulnerabilities.
  • Drafted and reviewed security policies and standards for DOD.
  • Assisted in establishing cyber security capabilities for Defence Intelligence DDS.
  • Conducted vulnerability assessments and penetration testing on DOD networks as part of operational activities, including red and blue team activities.

Military Practioner

South African National Defence Force
01.2003 - 08.2015
  • Responsible for training new recruits into the SANDF in the use of Computers, Radios, Record Management, Basic Soldiering and Regimental Duties.
  • Responsible for ensuring that all DOD related technical faults are reported and first line repair are done with client.
  • Provided 24/7 network surveillance and configuration recommendations for over 200 computers and multiple network area storage devices on a global WAN within my area of responsibility for SANDF
  • Provide a 24/7 satellite network support of the earth station and remote sites, prepare communication shelters for deployment both internally and externally of South Africa.

Education

Advance Diploma - Security Management

University of South Africa
Pretoria, South Africa
01.2020 - 12.2020

Three Year Diploma - Security Management

University of South Africa
Pretoria, South Africa
01.2012 - 12.2020

National Senior Certificate (Grade 12) -

Ashton Secondary School
Ashton, Wester Caper, South Africa
01.2000 - 12.2000

Skills

Excellent Team and Collaboration skillsundefined

Key Competencies

  • Data Security and Protection Technolgies
  • Research Design appropriate, practical, and effective network security controls.
  • Define, establish, and manage security risk metrics and track effectiveness.
  • Business Continuity and Disaster Recovery Processes and Implementations
  • Compliance Control Frameworks Implementation
  • Threat and risk assessments
  • Compile Reports
  • Vulnerability Management (Pentration, Vulnerabilites and Patch Managment)
  • Research emerging network security technologies.
  • Leading Teams and Departments
  • Excellent communicator
  • Financial and Budgeting skills.

Accomplishments and Achievements

  • Researched and designed new perimeter security technologies for both onsite and off-site premises which include features like IPS, IPSEC, ANTIBOT, IDS, URL and Application filtering (firewalls).
  • Implemented segregation of NON-Production environments for Production network by means of firewalls.
  • Researched and design UTM (Unified Threat Management) technologies (Mcafee, QRadar and Checkpoint) to integrate into existing environment.
  • Technical Lead for the design and implementation for Mcafee DXL and TIE.
  • Technical Lead for the design and implementation for Checkpoint Firewall solution with added HTTPS inspection and DLP technologies.
  • Technical Lead for the design and implementation for Symantec Bluecoat Web Security Solution.
  • Technical Lead for the design and implementation for Symantec DLP and CASB Proxy.
  • Technical Lead for the design and implementation endpoint encryption technology.
  • Certified CISSP (Certified Information Security Professional) Certificate
  • Certified COBIT 2019 Foundation Certificate
  • Attended Symantec Cloud Secure Gateway course

Table Tennis, Rugby and Cricker

Represented SANDF nationally in table tennis, participates in the Central Bank Games for South African Reserve Bank and played provincials rugby for SANDF.

Certification

CISSP Certified - (ISC)² Member ID 610629

Proficiency Courses Attended

CISM Course certificate of attendance

CCSE Course certificate of attendance

COBIT 2019 Design and Implementation certificate of attendance

ISSB (Information System Security Basic)

ISSA (Information System Security Advanced)

A+ Comptia

N+ Comptia

Basic Military Courses and Signal Corps Courses completed up until the Rank of Staff Sergeant

Work Phone

(012) 367 7861

References

  • Warrant Officer Lourens Badenhorst, Unique LAN Systems Manager, 012 529 0277, 082 961 6369
  • Lieutenant Colonel Deon May, Senior Officer 2 Directorate Defence Security, 0721501963
  • Mr Isaac Dhlomo, ICT Security: Senior Specialist - Manager, 012 422 2932, 071 883 7363

Timeline

COBIT 2019 Foundation

06-2023

AgilePM Agile Project Management Foundation Certified

10-2022

Endpoint Security Operations Specialist

South African Reserve Bank
09.2021 - Current

CISSP Certified - (ISC)² Member ID 610629

05-2021

Check Point Certified Security Administrator

09-2020

Advance Diploma - Security Management

University of South Africa
01.2020 - 12.2020

Project Management

07-2019

Team Leader

Financial Sector Conduct Authority
03.2018 - 01.2019

ICT Security Engineer

Financial Sector Conduct Authority
09.2017 - 08.2021

OCW (Offensive Cyber Warfare – SensePost)

06-2016

DDS Network Support ICT Security NCO

Defence Intelligence, Directorate Departemental Security
01.2015 - 01.2017

Three Year Diploma - Security Management

University of South Africa
01.2012 - 12.2020

Military Practioner

South African National Defence Force
01.2003 - 08.2015

National Senior Certificate (Grade 12) -

Ashton Secondary School
01.2000 - 12.2000
Herman JohnsonCyber Security Specialist