Browse live cyber security jobs in Cape Town, Western Cape. Salaries, top employers and how to apply. Updated regularly.

**Who we are?**
**Sanlam Investments**
 Sanlam Investments is uniquely equipped and positioned to deliver on its purpose of empowering generations to be financially confident, secure and prosperous. Through our vast in\-house expertise and strategic partner networks, we can access all asset classes across the globe, private and public, actively and passively managed, to develop investment solutions that are in our clients’ best interests and have a positive impact on society. Backed by the Sanlam Group’s balance sheet, Sanlam Investments has a true competitive advantage in its ability to invest alongside clients, particularly in private markets where impact investing drives the agenda.
   

  

 Sanlam Investments is one of the largest, most diversified financial services and investment firms in Southern Africa with assets under management and administration of more than R2 trillion. It is a B\-BBEE level 1 contributor and one of the largest black\-empowered asset managers on the African continent.
   

  

**What will you do?**
 The position of IT governance lead operates at the intersection of governance, architecture, security, risk and delivery. Working closely with enterprise architects, solution architects, development teams, operational IT teams, IT leadership, security practitioners, business information security officer (BISO) and business stakeholders, the role is instrumental in ensuring IT governance policies, standards and guidelines are effectively implemented, adopted and operationalised across the Cluster and Business Units.
   

  

 Key to the success of this position is maintaining strong alignment to enterprise strategy, regulatory expectations and broader (Sanlam) Group governance standards, while applying a pragmatic and enablement‑focused approach to governance implementation.
   

  

 From a leadership and governance perspective, the role includes the implementation and facilitation of governance forums, preparation and presentation of governance reporting, and active participation in Group, Cluster and Business Unit governance and assurance bodies. The role provides governance input, advice and implementation support to demonstrate effective control design, operation and evidence within the SI and broader Sanlam environment.
   

  

 From a security governance perspective, the role supports the Information Security Officer (BISO) by coordinating and enabling the implementation of security‑related requirements and roadmap items spanning technology, data and cyber security. This includes translating Group security direction into executable actions, supporting compliance activities, and contributing to governance oversight within project and delivery environments.
   

  

 The role also engages with relevant audit stakeholders, both internal and external, to coordinate and manage the audit reporting process.
   

  

**Key Responsibilities And Competencies**
**Leadership \& Governance Enablement**
* Establish, coordinate and mature IT governance practices across Cluster and Business Units
* Drive the rollout, adoption and practical implementation of IT governance, security and data standards
* Provide thought leadership on IT governance, risk, compliance and regulatory alignment
* Define, maintain and evolve governance frameworks, policies, standards, guidelines and implementation artefacts
* Establish and apply governance controls and monitoring mechanisms within the IT environment
* Set up, run and support Cluster‑wide IT governance forums and working groups
* Represent Cluster governance positions into Group governance structures
* Provide input into IT management decision‑making and strategic direction from a governance perspective
* Support audit, assurance and regulatory activities by ensuring governance evidence and traceability


**Governance, Oversight, Risk \& Compliance**
* Coordinate and perform IT governance maturity assessments and standards compliance reviews
* Review and provide input into Cloud Risk Assessments (CRA) and similar risk processes
* Support risk appetite alignment, exception handling and remediation planning
* Track, monitor and report on governance risks, gaps and remediation actions
* Ensure integration of regulatory, legal and policy requirements into governance practices
* Advise on acceptable governance and security remediation actions


**Security \& Interaction with BISO Function**
* Support execution of security governance implementation plans aligned to Group InfoSec direction
* Assist the BISO across defined service areas by providing governance coordination and enablement
* Ensure alignment between IT governance, cyber security and data governance requirements
* Support third‑party and supplier governance considerations in collaboration with security and risk teams
* Provide governance input into security‑related initiatives, controls and assurance activities


**Project \& Delivery Governance**
* Provide governance and security oversight within projects and solution delivery initiatives
* Advise project teams on governance, security and data requirements to be applied
* Ensure governance considerations are embedded early in solution lifecycles
* Contribute governance input to architecture, design and operational readiness discussions


**Communication \& Stakeholder Engagement**
* Prepare and present governance feedback, maturity and compliance reports
* Communicate effectively across all levels, from executive and senior management to delivery teams
* Engage constructively with Group IT governance functions for input, review and feedback
* Partner with Cluster and Business Unit IT Heads to drive regulatory, policy and standards adoption
* Communicate complex governance and risk concepts in a clear, pragmatic manner


**Minimum Requirements, Experience \& Behaviour**
**Must Have**
* Experience in IT governance, risk and compliance
* 5\+ years relevant experience in enterprise IT environments
* Demonstrated experience in policy and standards rollout and operationalisation
* Experience working in regulated environments, preferably financial services
* Proven ability to engage across Group, Cluster and Business Unit structures
* Experience participating in or supporting governance, audit and assurance bodies


**Advantageous**
* 7\+ years overall IT experience across multiple disciplines
* Formal qualifications in IT, Information Systems, Risk or related fields
* Knowledge of IT governance and security frameworks (e.g. ISO/IEC 38500, COBIT, ISO 27001, NIST)
* Exposure to financial services or asset management environments
* Experience or background in IT security function or architecture roles
* Familiarity with CISSP type work


**Behaviour**
* Strong planning, prioritisation and organisational skills
* Ability to effectively engage with Senior to Executive stakeholder
* Ability to balance governance rigour with pragmatism
* Action‑ and result‑oriented with high personal accountability
* Detail‑oriented while avoiding unnecessary bureaucracy
* Comfortable handling ambiguity, conflict and difficult conversations
* High integrity, resilience and professional maturity
* Continuous learning and improvement mindset


 The Sanlam Group is committed to achieving transformation and embraces diversity. This commitment is what drives us to achieve a diverse, inclusive and equitable workplace as we believe that these are key components to ensure a thriving and sustainable business in South Africa. The Group's Employment Equity plan and targets will be considered as part of the selection process.

IT Governance Lead

Location: Cape Town | Work Type: Hybrid | Job ID: J107254 About our client: Our client is a global investment advisory firm focusing on long-term value creation through investment strategies. They work with a diverse group of institutional partners and pride themselves on their collaborative, sustainable, inclusive culture and performance. You are welcome to go into the office daily or to take advantage of their hybrid in-office / remote benefit. This company places significant investment in em…

IT Manager

Location: Cape Town | Work Type: Hybrid | Job ID: J107253 About our client: Our client is a global investment advisory firm focusing on long-term value creation through investment strategies. They work with a diverse group of institutional partners and pride themselves on their collaborative, sustainable, inclusive culture and performance. You are welcome to go into the office daily or to take advantage of their hybrid in-office / remote benefit. This company places significant investment in em…

Technical Delivery Manager - Project Manager

Junior SOC Engineer, Cape Town (Hybrid) WHO WE ARE S-RM is a global intelligence and cyber security consultancy. Since 2005, we've helped some of the most demanding clients in the world solve some of their toughest information security challenges. We've been able to do this because of our outstanding people. We're committed to developing sharp, curious, driven individuals who want to think critically, solve complex problems, and achieve success. But we also know that work isn't everything. It's…

Junior SOC Engineer

Integrity360 is a leading independent cybersecurity and PCI specialist operating across Europe, Africa, the Caribbean, and North America. The company has office locations in Ireland, the UK, Bulgaria, Italy, Sweden, Spain, Lithuania, Ukraine, Africa, the Caribbean, and Canada, supported by seven Security Operations Centres (SOCs) located in Dublin, Sofia, Madrid, Stockholm, Rome, Johannesburg and Cape Town. With over 780 employees, including more than 585 dedicated cybersecurity professionals, …

Accounts Receivable Specialist

**Title:** Level 3 SOC Analyst


**Location:** Cape Town, 5 days a week onsite


**Work Hours:** 9\.00\-17\.30


**Job type:** Full\-Time Permanent


**Salary:** Negotiable / DOE  



  

  

  

**About Us**

  

Integrity360 is a leading independent cybersecurity and PCI specialist operating across Europe, Africa, the Caribbean, and North America. The company has office locations in Ireland, the UK, Bulgaria, Italy, Sweden, Spain, Lithuania, Ukraine, Africa, the Caribbean, and Canada, supported by seven Security Operations Centres (SOCs) located in Dublin, Sofia, Madrid, Stockholm, Rome, Johannesburg and Cape Town.  



  

With over 780 employees, including more than 585 dedicated cybersecurity professionals, Integrity360 delivers a full suite of professional, support, and managed security services. These span the complete cyber risk lifecycle, from identification and prevention to detection, response, and recovery. Integrity360 supports over 3000 mid\-market and enterprise organisations across sectors including financial services, insurance, government, healthcare, retail, telecommunications, and utilities.  



  

At Integrity360, people come first. We invest heavily in learning, development and progression, fostering a dynamic culture where innovation, collaboration and continuous growth are at the heart of what we do. If you're ready to take your cyber security career to the next level, we’d love to hear from you.  



  

  

  

**Job Role / Responsibilities**

  

In this role, you will act as a Level 3 escalation point within the MDR/SOC function, providing advanced technical support to Level 2 analysts during complex or high\-severity investigations. You will be expected to bring deep operational knowledge across modern security technologies, including SIEM, EDR, Network Intrusion Detection Systems, SOAR, DLP and related security monitoring platforms.
  

  

The Principal SOC Analyst will support the investigation, containment and remediation of advanced threats, ensuring that incidents are analysed in the correct business and technical context. The role requires strong hands\-on experience in security operations, incident response, threat analysis and detection tuning, as well as the ability to work directly with customers and internal stakeholders to improve detection capability and strengthen cyber security posture.
  

  

You will contribute to the continuous improvement of the MDR service by supporting the definition of security monitoring strategies, improving detection logic, tuning security technologies, reviewing investigation processes and advising customers on technical optimisation opportunities. A strong understanding of malware behaviour, adversary tactics, techniques and procedures, and emerging threats will be critical to success.  



  

**Primary Duties/Responsibilities include:**

  

  

* Act as the Level 3 escalation point for advanced, complex or high\-impact security investigations.
* Support Level 2 analysts during complex investigations, providing technical guidance, validation and direction.
* Perform in\-depth analysis of security events, alerts, logs, endpoint telemetry, network traffic and other relevant data sources.
* Lead advanced incident investigations, including scoping, containment, eradication and remediation recommendations.
* Analyse malicious activity, suspicious files, attacker behaviour and adversary TTPs.
* Support customers from a technical perspective in the optimisation, tuning and improvement of their security monitoring capabilities.
* Review and improve SIEM, EDR, NIDS, SOAR and other security tool configurations to reduce false positives and improve detection quality.
* Contribute to the development and refinement of detection use cases, correlation rules, alerting logic and investigation playbooks.
* Support the definition of customer security monitoring strategies based on risk profile, threat landscape and available telemetry.
* Provide technical recommendations to strengthen customer cyber security posture and improve resilience against current and emerging threats.
* Conduct threat hunting and proactive analysis based on indicators, behaviours, intelligence and attack patterns.
* Document investigation findings, evidence, timelines, containment actions and remediation recommendations in a clear and structured manner.
* Prepare and deliver technical reports to customers, partners and internal stakeholders.
* Monitor trusted sources for emerging threats, vulnerabilities and adversary activity relevant to customer environments.
* Contribute to the continuous improvement of SOC processes, procedures, documentation and knowledge base material.
* Develop and maintain proficiency in Integrity360’s MDR technologies, processes, and service offerings, applying this knowledge to improve customer outcome and service
Support mentoring and technical development of Level 1 and Level 2 analysts, promoting best practices, investigative methodologies and operational excellence across the SOC.  
* 

  

  

  

  

**Desired Skills**

  

  

* Strong hands\-on experience in Security Operations Centre or MDR environments.
* Deep operational knowledge of SIEM, EDR, Network Intrusion Detection Systems, SOAR, DLP and related security monitoring technologies.
* Strong experience with security event triage, correlation, investigation and escalation.
* Ability to analyse endpoint, network, identity, cloud and application telemetry in support of complex investigations.
* Experience with SIEM query languages and detection logic, such as KQL, SPL, Sigma or equivalent.
* Experience tuning security controls and detection content to improve alert fidelity and reduce false positives.
* Strong understanding of attacker tactics, techniques and procedures, including MITRE ATT\&CK.
* Ability to perform host\-based and network\-based threat analysis.
* Experience analysing packet captures, endpoint artefacts, logs, scripts, documents and potentially malicious files.
* Strong understanding of incident response lifecycle, including preparation, identification, containment, eradication, recovery and lessons learned.
* Strong understanding of enterprise network architecture, TCP/IP, firewalls, proxies, VPNs, DNS, email security and cloud environments.
* Understanding of security protocols, encryption technologies and common authentication mechanisms.
* Experience supporting customer\-facing technical discussions, including investigation reviews, tuning recommendations and posture improvement activities.
* Ability to manage multiple complex incidents and make effective decisions under pressure.
* Strong written and verbal communication skills, with the ability to explain technical findings to both technical and non\-technical stakeholders.
* Experience with Microsoft Sentinel, Microsoft Defender, Splunk, QRadar, CrowdStrike, SentinelOne, Palo Alto, Suricata, Zeek, Snort or similar technologies is highly beneficial.
* Experience with cloud security monitoring across Microsoft Azure, AWS or Google Cloud is beneficial.
* Experience with threat hunting, detection engineering or purple team activities is beneficial.
Ability to produce clear technical documentation, investigation reports and customer\-facing recommendations.  
* 

  

  

**Certifications/Qualifications**

  

  

* Security industry certifications such as GCIH, GCFA, GCIA, GNFA, GCTI, GSEC, CISSP, CySA\+, SC\-200, AZ\-500 or equivalent are highly beneficial.
* Minimum 5 years of experience in cyber security, including experience in SOC, MDR, incident response, CSIRT or cyber security operations environments.
* Proven experience handling complex security incidents and supporting advanced investigations.
* Willingness and ability to undertake training on Integrity360's MDR solutions, platforms and operational methodologies.
Working knowledge of SIEM, EDR, SOAR, NIDS, DLP and threat intelligence platforms.  
* 

  

\#L1\-GB1

Cyber Security Jobs in Cape Town - Page 2

Vacancies (page 2 of 2)