Browse live cyber security jobs in Midrand, Gauteng. Salaries, top employers and how to apply. Updated regularly.

Core competencies, knowledge and experience:Minimum 8 years' experience leading complex programmes and strategic initiatives, with a proven track record of delivering outcomes across large, multi-stakeholder, cross-functional and multi-country environmentsDemonstrated ability to translate strategic objectives into executable roadmaps, manage interdependencies and risks, and drive delivery against agreed targets, benefits, and business outcomes.Strong experience establishing programme governance…

Cyber Programme Manager

Role Purpose To support and conduct digital forensic investigations by collecting, preserving, analysing, and reporting on digital evidence. The role focuses on uncovering fraud, misconduct, data breaches, and cyber-related incidents through the application of established digital forensic methodologies and tools. This is a senior specialist role requiring extensive experience in leading complex digital forensic investigations, providing technical oversight and quality review of forensic work, a…

Digital Forensic Specialist

Dis\-Chem Pharmacies has an opportunity available for a Third\-Party Risk Management Specialist responsible for assessing and managing security risks arising from Dis\-Chem’s external vendors, technology partners, and service providers. The role establishes and maintains Dis\-Chem’s third\-party security due\-diligence framework, evaluates vendor controls before onboarding, and monitors ongoing compliance across the vendor lifecycle. Works closely with CISO, Enterprise Architecture, Procurement, and IT platform teams to ensure third\-party risks are identified early, assessed consistently, and addressed through contractual, technical, or operational controls. Strengthens resilience in a landscape heavily reliant on external IT partners.

**Requirements**  

* Degree in Information Security, IT, Risk Management, or related field
* 5\+ years’ experience in IT security or vendor risk management, preferably in a multi\-vendor environment
* Exposure to outsourced service models, SOC/MDR providers, and cloud\-hosted solutions.

**Responsibilities**

**Information Security Governance \& Compliance**

* Develop and maintain the third\-party security assessment and onboarding framework for all technology vendors
* Establish security requirements, minimum controls, and contractual clauses for IT suppliers in alignment with enterprise architecture and CISO standards
* Maintain a central third\-party risk register and ensure risk ratings, remediation actions, and exceptions are documented and reviewed
* Collaborate with Procurement to embed security reviews into sourcing and renewal

**Third\-Party Security Risk Management**

* Conduct risk assessments for new vendors and high\-risk services; evaluate security certifications, architecture, hosting, data flows, access models, and operational processes
* Identify control gaps and recommend mitigation across domains (e.g., IAM, data protection, resilience, patching, monitoring)
* Partner with IT platform teams to validate integration risks and enforce secure configuration requirements
* Track remediation progress with vendors and escalate overdue or critical issues to CISO

**Monitoring, Incident Support \& Reporting**

* Monitor vendor security posture continuously through attestations, performance metrics, and threat intelligence
* Support incident investigation when a vendor\-driven outage or cyber event impacts Dis\-Chem (noted as a known pain point)
* Provide reporting to CISO, Procurement, and Leadership on vendor risk levels, trends, and areas requiring uplift

**Competencies**

**Domain Expertise**

* Strong understanding of third\-party risk, vendor security controls, and security assessment methods
* Knowledge of risk domains relevant to retail pharmacy (hosting, data protection, resilience, availability, integrations)
* Familiarity with regulatory and contractual security requirements.

**Leadership \& Commercial Acumen**

* Ability to influence vendors and internal stakeholders toward secure\-by\-design decisions
* Strong negotiation and communication skills to articulate risks and required mitigations.

**Key Performance Indicators**

* % of vendors assessed and risk\-rated before onboarding
* Remediation closure rate for vendor findings
* Contribution to culture, accountability, engagement, and continuous improvement
* Reduction in vendor\-related incidents or outages
* Quality and completeness of vendor risk documentation
* Stakeholder satisfaction with vendor risk process

**Special Conditions of Employment:**  

South African citizen  

MIE, clear criminal and credit  

Driver’s license and/or own reliable transport  

  

**Remuneration and benefits:**  

* Market related salary
* Medical aid
* Provident fund
* Staff account

**ONLY SUCCESSFUL APPLICANTS WILL BE CONTACTED. IF YOU HAVEN\`T BEEN CONTACTED WITHIN TWO WEEKS AFTER THE CLOSING DATE CONSIDER YOUR APPLICATION AS UNSUCCESSFUL.**

 **Dis\-Chem Pharmacies is an equal opportunity employer. Dis\-Chem’s approved Employment Equity Plan and Targets will be considered as part of the recruitment process aligned to Dis\-Chem’s Employment Equity \& Transformation Strategy. Dis\-Chem actively supports the recruitment of People with Disabilities.**

Third Party Risk Management Specialist

Dis\-Chem Pharmacies has an opportunity available for a Regional IT Operations Squad Lead (Retail) who will be responsible for ensuring the stability, availability and performance of all IT systems and services supporting retail operations within the assigned region. The role ensures uninterrupted store trading, effective IT service delivery, and alignment between technology operations and business objectives, while leading regional IT support teams and third\-party service providers.

 **Minimum Requirements**  

**Essential:**

* A\+ N\+
* Prince2
* ITIL Foundation (or higher)
* Retail industry experience strongly
* Experience with large multi\-site
* Understanding of cyber security best practices in retail

**Responsibilities**

##### **Operational Leadership \& Management**

* Lead and manage regional IT operations teams, including technicians, field engineers, and service partners.
* Oversee day\-to\-day IT service delivery across all sites within the region, and manage Vendors/Service Partners

##### **Store \& Retail Technology Support**

* Ensure high availability and performance of critical store systems:
* Drive rapid issue resolution to minimize operational downtime and impact on customers.

##### **Incident, Problem \& Change Management**

* Act as the regional escalation point for major incidents and
* Ensure controlled and documented execution of change activities in the region

##### **Vendor \& Service Provider Management**

* Coordinate and manage third\-party field support
* Monitor service performance against SLAs and drive continuous improvement
* Oversee hardware lifecycle management and logistics within the region

##### **People Leadership**

* Mentor and develop a high\-performing regional IT
* Support capacity planning, workforce scheduling, and skills

**Competencies**

**Essential:**

* 8\+ years relevant IT experience, with at least 3–5 years in a retail operations or field support management role.
* Strong understanding of retail IT systems (POS, EFT, network, mobile devices).
* Experience managing geographically distributed
* Solid experience with ITIL processes (Incident, Problem, Change).
* Knowledge of network fundamentals, hardware, and store
* Ability to manage vendors and service partners
* Strong communication, stakeholder management, and leadership
* High Availability is required outside of operating hours

**Key Performance Indicators**

* Store System Availability
* Contribution to culture, accountability, engagement, and continuous improvement
* Incident Response and Resolution
* SLA Compliance (Internal \& Vendor)
* Ticket Volume \& Efficiency

**Ways of working (Agile \& squad\-based)**

* Lead a cross\-functional Regional Operations squad using Agile delivery principles
* Operate with clear platform ownership and accountability
* Promote reuse, standardization, and continuous improvement

**Special Conditions of Employment:**  

* South African citizen
* MIE, clear criminal and credit
* Driver’s license and/or own reliable transport

**Remuneration and benefits:**  

* Market related salary
* Medical aid
* Provident fund
* Staff account

**ONLY SUCCESSFUL APPLICANTS WILL BE CONTACTED. IF YOU HAVEN\`T BEEN CONTACTED WITHIN TWO WEEKS AFTER THE CLOSING DATE CONSIDER YOUR APPLICATION AS UNSUCCESSFUL.**

 **Dis\-Chem Pharmacies is an equal opportunity employer. Dis\-Chem’s approved Employment Equity Plan and Targets will be considered as part of the recruitment process aligned to Dis\-Chem’s Employment Equity \& Transformation Strategy. Dis\-Chem actively supports the recruitment of People with Disabilities.**

IT Operations Regional Lead - KZN

**Role Purpose**


To support and conduct digital forensic investigations by collecting, preserving, analysing, and reporting on digital evidence. The role focuses on uncovering fraud, misconduct, data breaches, and cyber\-related incidents through the application of established digital forensic methodologies and tools.


This is a senior specialist role requiring extensive experience in leading complex digital forensic investigations, providing technical oversight and quality review of forensic work, and mentoring junior team members.


The Digital Forensic Specialist will be responsible for handling complex forensic matters, providing technical guidance to junior team members, and working closely with forensic investigators, legal teams, clients, and other stakeholders to deliver accurate, timely, and defensible forensic findings.

 **Key Responsibilities**

**Digital Evidence Handling**

* Acquire, preserve, and forensically image digital evidence from endpoints, servers, mobile devices, and other digital media in accordance with established forensic standards.
* Maintain accurate chain\-of\-custody documentation and ensure the integrity, security, and confidentiality of all digital evidence.
* Plan and execute evidence collection activities for complex investigations.
* Provide guidance to junior team members on evidence acquisition, preservation, and handling procedures.

**Forensic Analysis**

* Conduct advanced forensic analysis of digital evidence to identify fraud, misconduct, data breaches, unauthorised activity, and other suspicious behaviour.
* Analyse email, file systems, operating systems, browsers, applications, logs, and other relevant digital artefacts, including the recovery of deleted or hidden data.
* Develop timelines and correlate evidence from multiple sources to establish facts and support investigative findings.
* Review forensic analysis and provide technical guidance on complex or sensitive investigations.

**Investigations Support**

* Provide digital forensic support across fraud, misconduct, cyber, litigation, regulatory, and other investigative matters.
* Work closely with investigators, legal teams, clients, and internal stakeholders to determine evidence requirements and appropriate forensic approaches.
* Provide specialist technical input on the interpretation and relevance of digital evidence.
* Manage assigned forensic activities and deliverables in line with agreed scope, quality standards, and timelines.

**Cyber \& Data Analytics**

* Support cyber investigations and incident response through forensic acquisition, analysis, and identification of indicators of compromise and suspicious activity.
* Analyse system, security, application, and other relevant data to identify anomalies, trends, and potential threats.
* Apply data analytics, scripting, automation, and other appropriate technologies to enhance forensic investigations.
* Correlate digital forensic findings with other investigative and analytical information to support conclusions.

**Reporting \& Presentation**

* Prepare clear, accurate, and defensible forensic reports covering methodologies, evidence examined, findings, and conclusions.
* Ensure findings are supported by appropriate evidence and meet required forensic and quality standards.
* Present and explain forensic findings clearly to investigators, clients, legal teams, and technical and non\-technical stakeholders.
* Review forensic reports and support legal, disciplinary, regulatory, or other formal proceedings where required.

**Team Support \& Development**

* Act as a senior technical specialist within the team, providing oversight, quality assurance, coaching, and mentorship to junior and intermediate digital forensic practitioners.
* Provide technical guidance, coaching, and mentoring to junior and intermediate digital forensic team members.
* Assist with the coordination and allocation of forensic activities and provide oversight on assigned work.
* Support quality assurance and adherence to forensic methodologies, procedures, and professional standards.
* Contribute to knowledge sharing and the continuous improvement of forensic processes, tools, and working practices.

 **Minimum Requirements**

**Qualifications**

* Degree in Computer Science, Information Systems, Digital Forensics, Cyber Security, Information Technology, or a related field.
* A postgraduate qualification in a relevant discipline will be advantageous.

**Experience**

* 8\+ years' experience in digital forensics, data analysis, IT audit, cyber investigations, incident response, or a related field.
* 3\+ years' experience in a supervisory, team lead, or managerial capacity, with responsibility for guiding or managing team members and/or forensic assignments.
* Proven experience in end\-to\-end digital forensic investigations, from evidence acquisition through to analysis and reporting.
* Experience handling complex fraud, misconduct, cyber, data breach, litigation, and regulatory matters.
* Strong practical knowledge of forensic tools, evidence analysis, and multiple digital environments, including endpoints, servers, mobile devices, and email.
* Experience providing technical guidance, reviewing forensic work, and engaging with multidisciplinary teams and senior stakeholders.
* Ability to manage multiple investigations and competing priorities while maintaining quality and attention to detail.

**Certifications – Advantageous**

* CISA – Certified Information Systems Auditor
* CHFI – Computer Hacking Forensic Investigator
* EnCE – EnCase Certified Examiner
* NUIX certification
* Cellebrite or similar mobile forensic certification
* Other recognised digital forensic application or cyber security certifications

**Professional Memberships – Advantageous**

* ACFE – Association of Certified Fraud Examiners
* IACIS – International Association of Computer Investigative Specialists
* Other recognised digital forensics, cyber security, audit, or investigation professional memberships

 **Key Skills \& Competencies**

* Advanced digital forensic analysis and investigation skills
* Strong understanding of digital evidence handling and chain\-of\-custody requirements
* Strong analytical and problem\-solving abilities
* Good understanding of cyber security and incident response principles
* Ability to analyse and interpret large volumes of digital evidence
* Strong report\-writing and presentation skills
* Ability to communicate technical findings clearly to non\-technical stakeholders
* Ability to work independently on complex investigations
* Ability to provide guidance and mentorship to junior team members
* Strong attention to detail and commitment to evidence integrity
* Good stakeholder and client management skills
* Sound judgement, discretion, and professional integrity
* Ability to manage competing priorities and work under pressure

Do you thrive on protecting businesses from ever-changing security risks? I am currently building a network of talented Cyber Security Engineers for exciting upcoming opportunities across a variety of industries. If you are passionate about information security, cyber defence, and protecting critical systems, I would love to connect with you. Key Responsibilities: - Design, implement, and maintain cybersecurity solutions and controls. - Monitor, detect, and respond to security incidents and thr…

Cyber Security Engineer

Dis-Chem Pharmacies has an opportunity available for a Regional IT Operations Squad Lead (Retail) who will be responsible for ensuring the stability, availability and performance of all IT systems and services supporting retail operations within the assigned region. The role ensures uninterrupted store trading, effective IT service delivery, and alignment between technology operations and business objectives, while leading regional IT support teams and third-party service providers. Minimum Req…

### **Job Description**


The Head: Information Security \& GRC provides enterprise\-wide leadership for the Bank’s ICT environment, information and systems security, cyber resilience, technology risk, governance, compliance and assurance. The role is accountable for establishing and maintaining a secure, resilient, compliant and business\-aligned technology environment across infrastructure, cloud, applications, data, identity, third\-party platforms and emerging technologies. The incumbent develops and executes integrated ICT and information security strategies, policies, standards, controls and operating models aligned to the Bank’s mandate, business strategy, risk appetite, regulatory obligations and recognised frameworks such as ISO/IEC 27001, NIST Cybersecurity Framework, COBIT, ITIL, POPIA and King V. The role enables secure digital transformation, strengthens operational resilience, provides executive and board\-level reporting on technology and cyber risk, and embeds a culture of security, accountability, service excellence, innovation and continuous improvement across the organisation.

### **Key Responsibilities**

**KEY PERFORMANCE AREAS**



1\. Strategic Delivery


* Develop and execute a comprehensive ICT, information security, and GRC strategy aligned to the organisation’s overall business objectives and long\-term vision.
* Identify strategic priorities and deliverables for Information / Security, and GRC based on the overall Bank strategy, ensuring alignment with organisational priorities.
* Own the enterprise ICT and security operating model, ensuring clear accountability for infrastructure, systems security, cloud security, identity and access management, data protection, resilience and GRC outcomes.
* Translate strategic priorities into clear digitalisation goals, initiatives, milestones, and measurable outcomes.
* Develop both long\-term and short\-term digitalisation strategies and implementation plans aligned to approved budgets and resource frameworks.
* Drive enterprise\-wide adoption of digital solutions through structured communication and stakeholder engagement internally and externally.
* Lead the communication of the strategy to all stakeholders internally and externally.
* Drive ICT and cybersecurity as strategic business enablers by aligning technology and security initiatives with business objectives, digital transformation priorities, and enterprise risk management outcomes.


2\. Governance and Compliance


* Establish and enforce information security policies, standards, and procedures.
* Maintain compliance with South African and international regulations (e.g.., POPIA, GDPR, ISO/IEC 27001\).
* Conduct regular policy reviews and updates in line with regulatory changes.
* Liaise with legal, risk, compliance and audit teams to manage regulatory risks and compliance obligations.
* Promote cyber risk ownership across business units by embedding cybersecurity risk management into business processes and decision\-making.
* Maintain an integrated technology, cyber and compliance control framework, including control ownership, testing, evidence management, remediation tracking and assurance reporting.
* Facilitate and drive appropriate, reasonable technical and organisational measures are implemented and evidenced to protect personal information, critical systems and sensitive business information.


3\. Cyber Security Operations


* Oversee the Security Operations Centre (SOC) and ensure effective threat monitoring and response.
* Manage incident response plans and lead investigations into security breaches.
* Implement and maintain security technologies (e.g.., SIEM, DLP, firewalls, endpoint protection).
* Conduct regular vulnerability assessments and simulation(penetration) testing.
* Leverage AI, automation, and advanced analytics to improve threat detection, monitoring, incident response, and security operations effectiveness.
* Drive the adoption of modern cybersecurity practices, including Zero Trust Architecture, cloud security governance, and continuous threat exposure management.


4\. Third\-Party Risk Management


* Develop and implement a third\-party risk management framework.
* Conduct due diligence and risk assessments for new and existing vendors.
* Monitor third\-party compliance with security requirements and SLAs.
* Maintain a centralised third\-party risk register and reporting mechanism.
* Ensure third\-party engagements do not compromise the organisation's security, data, or operational integrity.


5\. Reporting and Governance


* Establish and enforces robust governance frameworks and reporting mechanisms to ensure transparency, compliance, and effective decision\-making across all operations.
* Provide timely and accurate reporting of key performance indicators, risks, and progress against strategic objectives to relevant internal and external bodies.
* Prepare for and lead internal and external security audits.
* Maintain audit trails and documentation for compliance purposes.
* Report on security posture, incidents, and risk metrics to executive leadership and the board.
* Implement corrective actions and track remediation progress.


6\. Stakeholder Engagement


* Build and maintains strong, collaborative relationships with key internal and external stakeholders, including leadership, government entities, commercial banks, development partners, and community representatives, to drive shared objectives.
* Navigate complex stakeholder landscapes, influencing outcomes and fostering consensus to achieve strategic goals.
* Collaborate with enterprise architecture, infrastructure and solution delivery teams to ensure security\-by\-design principles are incorporated into technology and digital solutions


7\. People Management


* Lead, mentor, and develop a high\-performing team, fostering a culture of collaboration, accountability, and continuous learning to maximise individual and collective potential.
* Drive talent development initiatives, including coaching, performance management, and career pathing, to build and retain a skilled and motivated team.
* Attract, retain, and develop talent and ensure succession planning and sufficient capacity and capability in all critical functions, supporting diversity strategies and initiatives as well.
* Promote DBSA values and a culture of high performance through implementing performance management in line with the planned strategic objectives, goals, quality standards and agreed key performance measures using sound performance management principles.
* Contribute to building synergies \& cooperation across functions in the DBSA.
* Promote cybersecurity and AI literacy across the organisation through awareness, behavioral change, and capability\-building programmes.


8\. Security and Digital Transformation


* Foster a culture of security awareness and ensuring that third\-party engagements do not compromise the organisation’s security or operational integrity.
* Ensure that information and cyber security capabilities, controls, and governance frameworks effectively support and enable digital transformation initiatives, while protecting DBSA’s information assets and technology environment.
* Foster a mindset of innovation, identifying opportunities to adopt emerging technologies and best practices to modernise processes and deliver impactful solutions.


Key Measurements of Outputs


* Percentage reduction and prevention in security incidents.
* Percentage of critical systems compliant with approved security baselines, patching thresholds and resilience requirements.
* Successful adherence to compliance \& audit performance.
* Improvement of security awareness \& training impact of employees.
* Advancement in the organisation's cybersecurity maturity model score.
* Percentage of critical assets covered by key security controls.
* Number of open critical/high\-risk findings identified in third\-party assessments.
* Number of security incidents originatin

Head: Information Security & GRC

Reference: JHB001054-RM-1 Our client in the Telco sector is seeking a Cyber Programme Manager on a contract duration of 12 months. Role purpose Lead the planning, coordination, and delivery of the cyber security programme across the Group, ensuring alignment to the programme's objectives and governance framework. Oversee the end-to-end programme management of initiatives as well as associated project plans, risks and dependencies. Ensure consistent execution of the programme's delivery in align…

Programme Manager Midrand

Our client in the Telco sector is seeking a Cyber Programme Manager on a contract duration of 12 months. Role purpose Lead the planning, coordination, and delivery of the cyber security programme across the Group, ensuring alignment to the programme's objectives and governance framework. Oversee the end-to-end programme management of initiatives as well as associated project plans, risks and dependencies. Ensure consistent execution of the programme's delivery in alignment with the managing exe…

Reference: NCM003419-Glad-1 Do you thrive on protecting businesses from ever-changing security risks? I am currently building a network of talented Cyber Security Engineers for exciting upcoming opportunities across a variety of industries. If you are passionate about information security, cyber defence, and protecting critical systems, I would love to connect with you. Key Responsibilities: - Design, implement, and maintain cybersecurity solutions and controls. - Monitor, detect, and respond t…

Cyber Security Engineer Midrand

As the Cyber Security Programme Lead, you will be responsible for leading the planning, coordination, governance, and successful delivery of strategic cyber security initiatives across the Group. Working closely with executives, market teams, technology leaders, and cyber security specialists, you will ensure programmes are delivered on time, within scope, and aligned to strategic business objectives.
 



 This is a high\-impact role requiring a strong leader who can manage complex programmes, navigate multiple stakeholders, and drive accountability across large\-scale, multi\-country environments.
 



  





**Responsibilities:** 



* Lead the execution of enterprise\-wide Cyber Security strategic initiatives
* Drive programme governance, reporting, assurance, and delivery standards
* Manage integrated programme plans, roadmaps, dependencies, milestones, and risks
* Coordinate cross\-functional teams across Cyber Security, Technology, Digital, IT, Networks, and Business
* Provide executive\-level reporting and facilitate governance forums
* Track KPIs, benefits realisation, and programme outcomes
* Oversee programme risks, mitigations, compliance activities, and escalations
* Support budgeting, forecasting, resource planning, and investment tracking
* Drive continuous improvement, standardization, and delivery excellence
* Foster collaboration across local and international stakeholders to achieve strategic objectives



  





**Minimum Requirements:** 



* Relevant 3\-year Degree in Information Technology, Cyber Security, Business, or a related field
* Project Management certification (PMP, Prince2, or similar) advantageous
* Minimum 8 years' experience leading large\-scale programmes and strategic initiatives
* Proven experience delivering outcomes across complex, multi\-stakeholder and multi\-country environments
* Strong programme governance, risk management, KPI tracking, and executive reporting experience
* Excellent stakeholder management and influencing skills
* Strong understanding of cyber security governance, risk, and technology environments
* Exceptional organizational, planning, and coordination capabilities

Cyber Security Programme Lead

The Head of Information Security (CISO) is accountable for Dis\-Chem’s information security strategy, governance, risk management, and security operations. The role ensures the confidentiality, integrity, and availability of systems and data while enabling business growth and digital innovation. The CISO operates as both risk authority and business enabler, embedding security\-by\-design across platforms, vendors, and delivery teams.

**Requirements**  

* Degree in Information Security, IT, or related field
* Masters in Cyber Security preferred
* Relevant InfoSec certifications
* 10\+ years’ experience in senior security leadership
* Experience in regulated, large\-scale enterprise environments

**Responsibilities**

**Security strategy and governance**

* Define, own, and continuously evolve the enterprise information security strategy aligned to business objectives and risk appetite
* Establish and enforce security policies, standards, and control frameworks across the organisation
* Govern enterprise security architecture, patterns, and platform guardrails in alignment with Enterprise Architecture
* Provide regular security posture, risk, and compliance reporting to executive leadership and Board\-level forums

**Security operations and resilience**

* Oversee security operations, including threat monitoring, incident response, and forensic investigations
* Ensure effective detection, response, and recovery capabilities across all platforms and environments
* Partner with Technology Resilience to ensure business continuity, disaster recovery, and cyber resilience readiness
* Own relationships and performance of SOC/MDR providers and security tooling ecosystem

**Risk and third\-party security**

* Own enterprise information security risk management, including identification, assessment, mitigation, and reporting
* Define and maintain the organisation’s cyber risk framework aligned to enterprise risk management
* Govern third\-party and supply chain security risk, including supplier assurance and ongoing monitoring
* Lead engagement with internal and external audit, regulators, and compliance bodies

**Data, Privacy, and Regulatory Compliance**

* Ensure protection of sensitive data, including customer, patient, and operational data, in line with regulatory requirements (e.g. POPIA)
* Oversee data security, privacy controls, and secure use of data across platforms and integrations
* Ensure compliance with applicable laws, regulations, and industry standards

**Competencies**

* Deep expertise in cyber security, governance, and risk
* Strong executive communication and influence
* Ability to balance security rigor with business agility
* Lead, coach, and develop Tribes and Squad Leads and their teams
* Set performance expectations and conduct performance reviews
* Manage team capacity, workload allocation, and capability development
* Support recruitment, succession planning, and organisational design

 **Key Performance Indicators**

* Reduction in high\-severity security incidents
* Effectiveness of security controls and risk remediation
* Compliance with regulatory, audit, and policy requirements
* Security posture maturity and resilience readiness
* Stakeholder confidence in security governance
* Contribution to culture and leadership outcomes, measured through employee engagement, culture index improvements, and adherence to organisational values and leadership behaviours.
* Drive a security\-first culture across the organisation through awareness, training, and leadership engagement
* Promote accountability for security across all levels of the organisation
* Embed secure\-by\-design and secure\-by\-default principles across technology and business teams

Head of Information Security (CISO)

The Head of Information Security (CISO) is accountable for Dis-Chems information security strategy, governance, risk management, and security operations. The role ensures the confidentiality, integrity, and availability of systems and data while enabling business growth and digital innovation. The CISO operates as both risk authority and business enabler, embedding security-by-design across platforms, vendors, and delivery teams. Requirements Degree in Information Security, IT, or related field…

**ROLE PURPOSE**  

  

The key function of this role is to drive sales revenue and margin, and to ensure effective execution within the defined vertical segment. This is achieved by putting in place a clear and consistent account management strategy, creating strong focus within the public enterprise segment, and ensuring that portfolio management exceeds guidelines for each account.  

  

The role provides leadership, direction and resource stewardship to the segment's function. As a senior sales leader, the incumbent works closely with the **Chief Sales and Marketing Officer** to ensure overall segment sales performance, the profitable achievement of segment sales goals, and alignment of segment sales objectives with the organisation's business strategy.  

  

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skills, and abilities required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions  

  

**ROLE REQUIREMENT**  

* Primarily involved in the development, evolution, and approval of the long\-term vision across the segment.
* Sets segment strategy and significantly influences business unit strategy
* Provides leadership to sales team.
* Provides technical guidance to sales team.
* Gives regular, comprehensive and constructive feedback to team and conducts their performance appraisals.
* Proactively seeks feedback from team members and deals constructively with any criticism.
* Adjusts management style to get the best from the individuals within the team
* Delegates work to team members taking into account their capacity, level of skill and exposure to different types of work and complexity
* Provides clear instructions and direction, with reasonable deadlines

 **ESSENTIAL DUTIES AND RESPONSIBILITIES**

* Formulate and implement high level strategies to drive sales in the identified segment
* Define and execute operational strategy to acquire new customers within the identified segment
* Define and execute operational strategy to grow share of wallet within existing customers in the identified segment
* Drive a high\-performance sales culture within the identified segment using a strong sales management system
* Provide mentorship and coaching to sales people in the achievement of their sales objectives
* Accurately forecast in the weekly cadence to achieve organizational sales and financial objectives
* Track sales team metrics – pipeline accuracy, forecast accuracy and pipeline coverage, target achievement – and coach for performance
* Implement and execute on performance improvement plans for poor performance
* Drive strategic customer engagements at C\-level within the identified segment
* Provide input into commercial negotiations for purposes of closing strategic deals

  

**TECHNICAL / PROFESSIONAL COMPETENCIES**  

* Solid track record of managing key strategic accounts in both public and private enterprises
* Solid proven track record of achieving sales targets and sales execution
* Solid leadership skills

  

**QUALIFICATIONS \& EXPERIENCE**  

* Grade 12
* Degree qualification (essential)
* Post graduate qualification advantageous
* Solid understanding of the ICT Industry products and solutions including Cloud, Cyber\-security and Digital
* For the Private Sector Segment, a solid understanding of the multiple sectors (Retail, FSI, Mining and Manufacturing, etc), trends and ICT opportunities. A strong network within these sectors will be advantageous.
* Excellent verbal and written communication skills
* 10\+ years of experience in Sales as well as at management level

  

**LEADERSHIP COMPETENCY REQUIREMENTS**  

* Exceptional team management skills
* Excellent verbal and written communication
* Ability to delegate efficiently
* Extensive industry knowledge with an eye towards the future
* Diplomacy and patience
* People skills
* Strategic thinking
* Listening
* The ability to set and execute the vision of the company

EHOD: Private Enterprise

My client based in Waterfall, Johannesburg is currently looking for an Information Security Engineer to join their team on a permanent basis.
   

  

 IT / FINANCE
   

  

**Responsibilities**
* Design, implement and maintain advanced security controls across on\-premises, cloud and SaaS environments.
* Define and maintain security architecture standards and assess new technology integrations.
* Lead application security assessments and promote secure development lifecycle practices.
* Configure, manage and optimise enterprise firewalls and WAF solutions.
* Oversee security technologies including SIEM, EDR, DLP, web servers and vulnerability management platforms.
* Develop security automation strategies for threat detection, response and ITSM integration.
* Establish security operational procedures and playbooks while mentoring junior team members.
* Manage relationships, SLAs and performance metrics with outsourced SOC providers.
* Lead major security incident investigations, forensic analysis and root\-cause investigations.
* Act as the escalation point for critical security incidents and coordinate cross\-functional responses.
* Drive proactive threat hunting and advanced security analytics.
* Develop and manage vulnerability and patch management strategies.
* Provide executive\-level reporting on security risks, vulnerabilities and remediation progress.
* Architect and enforce identity governance using Microsoft Entra ID and implement Zero Trust and privileged access management principles.
* Develop and deliver cybersecurity awareness programmes, campaigns and educational content.
* Ensure security alignment with relevant regulatory, compliance and industry frameworks.
* Lead technical audits, penetration testing and red/blue team exercises.
* Develop security metrics, risk dashboards and executive/board\-level reports.
* Analyse threat intelligence and security trends and recommend improvements to the organisation's security posture.
* Maintain detailed documentation and reporting relating to firewall and WAF configurations, changes and performance.


**Qualifications \& Experience**
* Bachelor's Degree in IT, Computer Science, Information Security, or a related field.
* CISSP, CISM, or equivalent senior\-level cybersecurity certification.
* Microsoft Certified: Cybersecurity Architect Expert and/or relevant Microsoft SC\-series certifications.
* 7\+ years' experience in cybersecurity or information security engineering, including 3\+ years in a senior/lead capacity.
* Strong experience across on\-premises, cloud and SaaS security environments, particularly Azure and Microsoft 365\.
* Expert\-level knowledge of SIEM, EDR, firewalls, WAF, DLP and vulnerability management solutions.
* Hands\-on experience with firewall configuration, WAF deployment and security reporting.
* Proven experience leading incident response, threat hunting, security architecture and security engineering projects.
* Advanced knowledge of Identity \& Access Management, Microsoft Entra ID, privileged access management and Zero Trust.
* Strong scripting and automation experience using PowerShell and Python.
* Experience with security frameworks and regulatory requirements, including ISO 27001, NIST CSF, CIS, POPIA, GDPR and FSCA.
* Experience designing and implementing information security awareness programmes.
* Experience with Hillstone, NGINX, Microsoft Intune, Microsoft Purview and SIEM solutions would be advantageous.


 Competencies
   

  

* Strong information security and cybersecurity expertise.
* Excellent analytical, problem\-solving and troubleshooting skills.
* Strong understanding of security architecture, risk management and threat management.
* Excellent communication skills, with the ability to engage with both technical and executive audiences.
* Strong leadership, mentoring and team\-development capabilities.
* Excellent organisational, documentation and reporting skills.
* Ability to analyse data, identify trends and translate findings into actionable recommendations.
* Strong ITSM and Microsoft Office proficiency.
* Ability to manage multiple priorities and work effectively in a fast\-paced environment.
* Strong stakeholder and customer service orientation.
* Highly ethical, resilient and security\-conscious.
* Results and achievement orientated.
* Collaborative team player with a positive and motivated attitude.
* Commitment to continuous improvement and staying current with evolving cybersecurity threats and technologies.


 If you are ready for the next exciting step in your career, and would like to apply, please send us your updated CV to review
   

  

**Desired Skills**
* Organization
* communication skills.
* good team player
* ITSM
* Microsoft Office Suite

Information Security Engineer at QE Services

IT Services Manager Join a fast-paced FMCG business where technology enables operational excellence across manufacturing, distribution, and business operations. We are seeking an experienced IT Services Manager to lead the delivery of secure, reliable, and cost-effective IT services across infrastructure, networks, cloud platforms, cybersecurity, vendor management, and service operations. Reporting to the Group IT Executive, you will drive service excellence, technology modernisation, business …

IT Services Manager

Our client, a leading organisation in the telecommunications industry, is seeking an experienced Senior Specialist: Cyber Security to join their Information Technology division. The successful candidate will be responsible for driving and enhancing the cyber security posture of the VFS and DLS financial services entities. This role requires a deep understanding of cyber security frameworks, emerging threats, industry best practices, and regulatory requirements. The incumbent will provide strate…

Specialist - Cyber Security VFS and DLS

**About the Role**

We are looking for a motivated and security\-focused Junior Cyber Security Analyst to join our technical security operations team. You will be responsible for monitoring our systems, applications, infrastructure and security alerts around the clock. This is a hands\-on entry\-level role suited to someone who is highly observant, willing to learn, and interested in cybersecurity, threat detection and incident response. Because our systems operate 24/7, the successful candidate must be comfortable working rotational shifts, including nights, weekends and public holidays.

**Key Responsibilities**

● Monitor security dashboards, logs, alerts and system activity.

● Identify and investigate suspicious or unusual user and system behaviour.

● Monitor vulnerability and security alerts across applications and infrastructure.

● Perform initial investigation and classification of security incidents.

● Escalate confirmed or high\-risk incidents to senior technical/security team members.

● Track security incidents from detection through resolution.

● Monitor authentication attempts, failed logins and potentially compromised accounts.

● Identify potential malware, phishing, brute\-force and unauthorised\-access activity.

● Review application and server logs for suspicious activity.

● Assist with vulnerability monitoring and basic security assessments.

● Maintain accurate incident and investigation records.

● Assist with security audits, reports and compliance requirements.

● Monitor system availability and flag unusual technical activity that may indicate a security issue.

● Follow established incident\-response and escalation procedures.

● Participate in security handovers between shifts.

● Stay informed about common cybersecurity threats and attack techniques.

● Assist the wider engineering team with security\-related investigations when required.

**Shift Responsibilities**

**The role operates on a 24/7 three\-shift rotational schedule.**

**You may be required to work:**

● Morning shifts

● Afternoon/evening shifts

● Night shifts

● Weekends

● Public holidays A structured handover is required at the end of every shift to ensure active incidents, alerts and investigations are properly transferred to the next analyst.

**Minimum Requirements**

● Grade 12 / Matric.

● Diploma, certificate or relevant qualification in Cybersecurity, Information Technology, Computer Science or a related field is advantageous.

● Basic understanding of cybersecurity principles.

● Understanding of networking fundamentals such as TCP/IP, DNS, HTTP/HTTPS and ports. ● Basic understanding of Linux and/or Windows environments.

● Ability to read and understand system/application logs.

● Strong analytical and problem\-solving skills.

● Excellent attention to detail.

● Good written and verbal communication.

● Ability to remain calm and follow procedures during security incidents.

● Willingness to work rotational 24/7 shifts.

**Advantageous Skills Experience or knowledge of the following will be advantageous:**

● SIEM platforms

● SOC operations

● Log management and monitoring

● Vulnerability scanners

● Endpoint security

● Firewalls and network security

● Cloud security

● Incident response

● Threat intelligence

● OWASP and web application security

● Linux administration

● SQL and database security

● AWS, Azure or Google Cloud

● Security frameworks such as ISO 27001 or NIST

Pay: From R7 000,00 per month

Work Location: In person

Junior Cyber Security Analyst

We're looking for a skilled
 **Microsoft 365, Azure \& Security Engineer (L3\)** 
 to join our team. This role combines hands\-on administration with a strong security focus, ensuring the stability, security, and optimisation of our Microsoft 365 and Azure environments.
 



  





 This is a
 **hybrid position** 
 , with a combination of remote work and regular attendance at our
 **Midrand offices** 
 .
 



  





**Starting Date:** 
 We are looking to fill this position as soon as possible.
 



  





**Key Responsibilities** 



* Administer and support Microsoft 365 services, including Exchange Online, SharePoint Online, OneDrive, Teams and Intune
* Manage Azure infrastructure, Microsoft Entra ID, Conditional Access policies and hybrid identity environments
* Lead and support Microsoft 365 and Azure tenant security assessments
* Implement, maintain and optimise security controls, including Microsoft Defender, Purview, Sentinel, MFA, DLP and Privileged Access Management (PAM)
* Investigate security alerts, drive remediation activities and support compliance and audit requirements
* Develop and maintain technical documentation, runbooks and operational procedures
* Automate routine administrative tasks and contribute to standardisation initiatives



  





**Requirements** 



* 3 to 5 years' experience in a Level 3 Microsoft 365, Azure or Security Engineering role
* Strong technical expertise across Microsoft 365, Azure, Entra ID, endpoint management and security technologies
* Experience with Microsoft Defender, Purview, Sentinel, PowerShell and ITIL\-based environments
* Relevant Microsoft certifications, such as:
* AZ\-104: Microsoft Azure Administrator
* SC\-300: Identity and Access Administrator
* SC\-900: Security, Compliance and Identity Fundamentals
* SC\-200: Security Operations Analyst
* AZ\-500: Azure Security Engineer
* Microsoft Endpoint Administrator Associate
* Excellent communication, problem\-solving and stakeholder management skills



  





**Apply** 




 To apply, please send your CV to
 **philipv@strategix.uk** 
 or via
 **Linkedin Jobs** 
 .
 



  





 We look forward to hearing from you.

Microsoft 365, Azure & Security Engineer (L3)

Responsible for: Manage the Security and Privacy by Design Assurance (SPDA) processes Ensure that all projects follow the security-by-design principles, and that privacy and security risks are mitigated from the design phase to implementation. Conduct internal and external penetration tests on the companys infrastructure, web applications, APIs, and network systems to identify vulnerabilities. Assess the security of new and existing systems, products, and services to ensure compliance with comp…

Senior Specialist â Cyber Security Assurance

A leader in telecoms are looking for a Senior Specialist - Cyber Security Assurance to manage the Security and Privacy by Design Assurance (SPDA) processes Responsible for: Manage the Security and Privacy by Design Assurance (SPDA) processes Ensure that all projects follow the security-by-design principles, and that privacy and security risks are mitigated from the design phase to implementation. Conduct internal and external penetration tests on the company’s infrastructure, web applications, …

Cyber Security Jobs in Midrand - Page 2

Vacancies (page 2 of 2)