About Company
Caledonia Mining Corporation Plc is a profitable, multi-asset gold producer with a primary focus on its flagship asset, the Blanket Gold Mine in Zimbabwe. With a deep commitment to sustainable practices, operational excellence, and community development, Caledonia is a significant employer and economic contributor in Matabeleland South Province. We are dedicated to ensuring the safety, integrity, and efficiency of our operations, which extends to the robust protection of our critical information technology and operational technology systems. As we continue to innovate and expand, safeguarding our digital infrastructure against evolving cyber threats is paramount to our continued success and our responsibility to our stakeholders.
Job Description
We are actively seeking a highly skilled and proactive Cybersecurity Analyst to become an integral part of our dedicated IT team at Blanket Mine, located in the vibrant Matabeleland South Province of Zimbabwe. This pivotal role demands a professional committed to safeguarding our extensive digital assets, critical operational technology (OT) systems, and sensitive corporate data against an ever-evolving and increasingly sophisticated array of cyber threats. The successful candidate will be at the forefront of our defense, tasked with diligently monitoring security systems, executing swift and effective responses to security incidents, conducting thorough vulnerability assessments, and implementing robust security measures across both our traditional IT infrastructure and specialized OT environments.
Your expertise will be crucial in ensuring our adherence to rigorous industry standards and internal security policies, thereby contributing significantly to a secure operational framework that is fundamental to the uninterrupted success and productivity of our mining activities. This position requires an individual with an exceptional eye for detail, superior analytical capabilities, and an unwavering commitment to continuous professional development within the dynamic field of cybersecurity. While our primary need is for a full-time professional to fully integrate into our team, we are open to considering exceptional candidates for a part-time arrangement, provided it aligns seamlessly with specific project requirements and our operational capacity.
As a Cybersecurity Analyst at Blanket Mine, you will collaborate closely with various internal departments, including IT infrastructure teams, operational supervisors, and our trusted external security partners. This collaborative approach ensures the development and implementation of comprehensive protection strategies and fosters a robust culture of security awareness throughout the entire organisation. This presents a unique and exciting opportunity to apply your cybersecurity prowess in a challenging yet rewarding environment, directly contributing to the resilience, security, and sustained growth of a vital industry operation within Zimbabwe. Join us in protecting the future of mining through cutting-edge cybersecurity practices.
Key Responsibilities
- Monitor security systems (SIEM, IDS/IPS, EDR) for anomalies, security breaches, and potential threats.
- Investigate and respond to security incidents, including forensic analysis, containment, eradication, and recovery.
- Perform vulnerability assessments and penetration testing to identify weaknesses in our IT and OT infrastructure.
- Implement and manage security controls, policies, and procedures to mitigate risks.
- Develop and deliver cybersecurity awareness training to employees.
- Assist in the development and maintenance of incident response plans and disaster recovery strategies.
- Ensure compliance with relevant data protection regulations and industry security standards.
- Manage and maintain security tools and technologies, including firewalls, antivirus, and identity management systems.
- Collaborate with IT and OT teams to integrate security best practices into system design and implementation.
- Generate regular security reports and provide recommendations for continuous improvement.
Required Skills
- Proven experience (minimum 3 years) in cybersecurity, preferably within an industrial or operational technology (OT) environment.
- Strong understanding of network protocols, operating systems (Windows, Linux), and cloud security principles.
- Proficiency with security tools such as SIEM, IDS/IPS, vulnerability scanners, and endpoint protection.
- Solid knowledge of cybersecurity frameworks (e.g., NIST, ISO 27001) and common attack methodologies.
- Experience in incident response, threat hunting, and security investigations.
- Ability to analyze security logs and alerts to identify and interpret malicious activity.
- Excellent problem-solving skills and meticulous attention to detail.
- Strong written and verbal communication skills in English.
- Ability to work independently and collaboratively in a fast-paced environment.
Preferred Qualifications
- Bachelor’s degree in Computer Science, Information Security, or a related field.
- Relevant industry certifications (e.g., CompTIA Security+, CySA+, CEH, CISSP).
- Experience with industrial control systems (ICS) security or SCADA systems.
- Familiarity with Python or PowerShell for scripting and automation.
- Knowledge of local Zimbabwean regulatory requirements for data privacy and security.
Perks & Benefits
- Competitive annual salary commensurate with experience and qualifications.
- Comprehensive health and wellness benefits package.
- Pension and retirement savings plans.
- Opportunities for professional development and continuous learning.
- Access to industry-leading cybersecurity training and certifications.
- A supportive and collaborative work environment.
- Contribution to a critical industry in Zimbabwe's economy.
- Relocation assistance may be considered for exceptional candidates.
How to Apply
Interested candidates are encouraged to apply by clicking on the application link below. Please ensure your CV and cover letter highlight your relevant experience and qualifications for this role. Only shortlisted candidates will be contacted for an interview.