Browse live cyber security jobs in Sandton, Gauteng. Salaries, top employers and how to apply. Updated regularly.

**Who we are?**
**Sanlam Investments**
 Sanlam Investments is uniquely equipped and positioned to deliver on its purpose of empowering generations to be financially confident, secure and prosperous. Through our vast in\-house expertise and strategic partner networks, we can access all asset classes across the globe, private and public, actively and passively managed, to develop investment solutions that are in our clients’ best interests and have a positive impact on society. Backed by the Sanlam Group’s balance sheet, Sanlam Investments has a true competitive advantage in its ability to invest alongside clients, particularly in private markets where impact investing drives the agenda.
   

  

 Sanlam Investments is one of the largest, most diversified financial services and investment firms in Southern Africa with assets under management and administration of more than R2 trillion. It is a B\-BBEE level 1 contributor and one of the largest black\-empowered asset managers on the African continent.
   

  

**What will you do?**
 The position of IT governance lead operates at the intersection of governance, architecture, security, risk and delivery. Working closely with enterprise architects, solution architects, development teams, operational IT teams, IT leadership, security practitioners, business information security officer (BISO) and business stakeholders, the role is instrumental in ensuring IT governance policies, standards and guidelines are effectively implemented, adopted and operationalised across the Cluster and Business Units.
   

  

 Key to the success of this position is maintaining strong alignment to enterprise strategy, regulatory expectations and broader (Sanlam) Group governance standards, while applying a pragmatic and enablement‑focused approach to governance implementation.
   

  

 From a leadership and governance perspective, the role includes the implementation and facilitation of governance forums, preparation and presentation of governance reporting, and active participation in Group, Cluster and Business Unit governance and assurance bodies. The role provides governance input, advice and implementation support to demonstrate effective control design, operation and evidence within the SI and broader Sanlam environment.
   

  

 From a security governance perspective, the role supports the Information Security Officer (BISO) by coordinating and enabling the implementation of security‑related requirements and roadmap items spanning technology, data and cyber security. This includes translating Group security direction into executable actions, supporting compliance activities, and contributing to governance oversight within project and delivery environments.
   

  

 The role also engages with relevant audit stakeholders, both internal and external, to coordinate and manage the audit reporting process.
   

  

**Key Responsibilities And Competencies**
**Leadership \& Governance Enablement**
* Establish, coordinate and mature IT governance practices across Cluster and Business Units
* Drive the rollout, adoption and practical implementation of IT governance, security and data standards
* Provide thought leadership on IT governance, risk, compliance and regulatory alignment
* Define, maintain and evolve governance frameworks, policies, standards, guidelines and implementation artefacts
* Establish and apply governance controls and monitoring mechanisms within the IT environment
* Set up, run and support Cluster‑wide IT governance forums and working groups
* Represent Cluster governance positions into Group governance structures
* Provide input into IT management decision‑making and strategic direction from a governance perspective
* Support audit, assurance and regulatory activities by ensuring governance evidence and traceability


**Governance, Oversight, Risk \& Compliance**
* Coordinate and perform IT governance maturity assessments and standards compliance reviews
* Review and provide input into Cloud Risk Assessments (CRA) and similar risk processes
* Support risk appetite alignment, exception handling and remediation planning
* Track, monitor and report on governance risks, gaps and remediation actions
* Ensure integration of regulatory, legal and policy requirements into governance practices
* Advise on acceptable governance and security remediation actions


**Security \& Interaction with BISO Function**
* Support execution of security governance implementation plans aligned to Group InfoSec direction
* Assist the BISO across defined service areas by providing governance coordination and enablement
* Ensure alignment between IT governance, cyber security and data governance requirements
* Support third‑party and supplier governance considerations in collaboration with security and risk teams
* Provide governance input into security‑related initiatives, controls and assurance activities


**Project \& Delivery Governance**
* Provide governance and security oversight within projects and solution delivery initiatives
* Advise project teams on governance, security and data requirements to be applied
* Ensure governance considerations are embedded early in solution lifecycles
* Contribute governance input to architecture, design and operational readiness discussions


**Communication \& Stakeholder Engagement**
* Prepare and present governance feedback, maturity and compliance reports
* Communicate effectively across all levels, from executive and senior management to delivery teams
* Engage constructively with Group IT governance functions for input, review and feedback
* Partner with Cluster and Business Unit IT Heads to drive regulatory, policy and standards adoption
* Communicate complex governance and risk concepts in a clear, pragmatic manner


**Minimum Requirements, Experience \& Behaviour**
**Must Have**
* Experience in IT governance, risk and compliance
* 5\+ years relevant experience in enterprise IT environments
* Demonstrated experience in policy and standards rollout and operationalisation
* Experience working in regulated environments, preferably financial services
* Proven ability to engage across Group, Cluster and Business Unit structures
* Experience participating in or supporting governance, audit and assurance bodies


**Advantageous**
* 7\+ years overall IT experience across multiple disciplines
* Formal qualifications in IT, Information Systems, Risk or related fields
* Knowledge of IT governance and security frameworks (e.g. ISO/IEC 38500, COBIT, ISO 27001, NIST)
* Exposure to financial services or asset management environments
* Experience or background in IT security function or architecture roles
* Familiarity with CISSP type work


**Behaviour**
* Strong planning, prioritisation and organisational skills
* Ability to effectively engage with Senior to Executive stakeholder
* Ability to balance governance rigour with pragmatism
* Action‑ and result‑oriented with high personal accountability
* Detail‑oriented while avoiding unnecessary bureaucracy
* Comfortable handling ambiguity, conflict and difficult conversations
* High integrity, resilience and professional maturity
* Continuous learning and improvement mindset


 The Sanlam Group is committed to achieving transformation and embraces diversity. This commitment is what drives us to achieve a diverse, inclusive and equitable workplace as we believe that these are key components to ensure a thriving and sustainable business in South Africa. The Group's Employment Equity plan and targets will be considered as part of the selection process.

IT Governance Lead

Reference: NWA004541-Prem-1 My Client in the northern suburbs of Jhb is urgently looking for an IT Manager that will lead the organisation’s technology operations, ensuring that IT systems, infrastructure, applications, networks, and support services are secure, reliable, efficient, and aligned with business objectives -Manage day-to-day IT operations, including infrastructure, networks, systems, applications, end-user support, and service availability. - Lead, coach, and develop IT team member…

IT Manager

**Job Purpose Summary:**  

  

As a Solutions Engineer focusing on Enterprise Networking, Server, Storage, and Cyber Security within the IT distribution sector, you will play a pivotal role in designing and implementing comprehensive solutions for our clients. The Solutions Engineer is a primary pre\-sales resource, providing support to account managers and partners and providing training and upskilling as required.
  

  

**Key Duties and Responsibilities:**  

Lead all technical aspects of a sales cycle with customers, from initial RFIs, through to RFPs and RFQs when required. This includes the project management and active participation in POCs in partnership with the relevant teams both internally and within the customer.

* Work closely with Vendors’ commercial and technical teams to develop comprehensive knowledge of their features, benefits and technical capabilities.
* Collaborate with sales and technical teams to understand customer requirements and translate them into effective network, server, storage, and security solutions.
* Design and understand the technical architecture of solutions, including how different components integrate and interact.
* Provide technical pre\-sales support, including product demonstrations and presentations to potential clients.
* Lead proof\-of\-concept (POC) and pilot initiatives to showcase the feasibility and efficacy of Nology’s technologies in solving specific customer challenges.
* Diagnose and troubleshoot issues during the sales process, including POC demonstrations and projects commissioning.
* Analyse and prepare responses to RFPs, RFIs and Tenders with high\-quality technical documentation.
* Stay abreast of market trends, competitive landscape, and emerging technologies to effectively position our solutions and differentiate them from competitors.
* Attend customer meetings, providing support to account managers with the goal of gaining technical understanding of the challenges and outcomes they require.
* Assist product managers with BOQ / BOM generation to meet customer requirements.
* Provide internal and external training and enablement sessions.
* Achieve and maintain certifications as set forth in vendor programmes.
* Conduct certification training sessions on behalf of vendors as applicable.
* Participate in industry events, conferences, and partner roadshows to represent Nology.

**Requirements**

* Proven track record in designing and implementing enterprise networking and cybersecurity solutions.
* Demonstrable experience with enterprise servers and storage solutions, including virtualized environments.
* Strong understanding of network protocols, security principles, and best practices for enterprise environments.
* Familiarity with industry\-standard networking and cybersecurity tools and technologies.
* Proficiency in delivering engaging and persuasive presentations to both technical and business audiences.
* Excellent problem\-solving skills with a customer\-focused approach.
* Effective communication skills, both written and verbal, to articulate complex technical concepts to diverse audiences.
* Positive attitude, self\-motivated, and committed to exceeding customer expectations.
* Relevant technical certifications (e.g., CCNA, CCNP, CompTIA Security\+) are highly regarded.

Solutions Engineer

Location: Cape Town | Work Type: Hybrid | Job ID: J107254 About our client: Our client is a global investment advisory firm focusing on long-term value creation through investment strategies. They work with a diverse group of institutional partners and pride themselves on their collaborative, sustainable, inclusive culture and performance. You are welcome to go into the office daily or to take advantage of their hybrid in-office / remote benefit. This company places significant investment in em…

Location: Cape Town | Work Type: Hybrid | Job ID: J107253 About our client: Our client is a global investment advisory firm focusing on long-term value creation through investment strategies. They work with a diverse group of institutional partners and pride themselves on their collaborative, sustainable, inclusive culture and performance. You are welcome to go into the office daily or to take advantage of their hybrid in-office / remote benefit. This company places significant investment in em…

Technical Delivery Manager - Project Manager

Our client is seeking an experienced Information Security Management System (ISMS) Manager to lead information security governance, enterprise risk management, and regulatory compliance within a highly regulated iGaming environment. This is an excellent opportunity for a governance-focused security professional who can influence senior stakeholders, drive compliance initiatives, and ensure the organisation remains secure, audit-ready, and aligned with ISO 27001 standards. Requirements: Degree i…

Information Security Management System (ISMS) Manager

Junior SOC Engineer, Cape Town (Hybrid) WHO WE ARE S-RM is a global intelligence and cyber security consultancy. Since 2005, we've helped some of the most demanding clients in the world solve some of their toughest information security challenges. We've been able to do this because of our outstanding people. We're committed to developing sharp, curious, driven individuals who want to think critically, solve complex problems, and achieve success. But we also know that work isn't everything. It's…

Junior SOC Engineer

Our client is looking for a confident and experienced Information Security Management System (ISMS) Manager to oversee enterprise-wide security governance, risk management, and compliance activities. This role offers the opportunity to influence business strategy by ensuring the organisation remains secure, compliant, and audit-ready within a regulated online gaming environment. What You'll Be Responsible For Managing and enhancing the organisation's ISO 27001 Information Security Management Sy…

Integrity360 is a leading independent cybersecurity and PCI specialist operating across Europe, Africa, the Caribbean, and North America. The company has office locations in Ireland, the UK, Bulgaria, Italy, Sweden, Spain, Lithuania, Ukraine, Africa, the Caribbean, and Canada, supported by seven Security Operations Centres (SOCs) located in Dublin, Sofia, Madrid, Stockholm, Rome, Johannesburg and Cape Town. With over 780 employees, including more than 585 dedicated cybersecurity professionals, …

Accounts Receivable Specialist

**Title:** Level 3 SOC Analyst


**Location:** Johannesburg, 5 days a week onsite


**Work Hours:** 9\.00\-17\.30


**Job type:** Full\-Time Permanent


**Salary:** Negotiable / DOE  



  

  

  

**About Us**

  

Integrity360 is a leading independent cybersecurity and PCI specialist operating across Europe, Africa, the Caribbean, and North America. The company has office locations in Ireland, the UK, Bulgaria, Italy, Sweden, Spain, Lithuania, Ukraine, Africa, the Caribbean, and Canada, supported by seven Security Operations Centres (SOCs) located in Dublin, Sofia, Madrid, Stockholm, Rome, Johannesburg and Cape Town.  



  

With over 780 employees, including more than 585 dedicated cybersecurity professionals, Integrity360 delivers a full suite of professional, support, and managed security services. These span the complete cyber risk lifecycle, from identification and prevention to detection, response, and recovery. Integrity360 supports over 3000 mid\-market and enterprise organisations across sectors including financial services, insurance, government, healthcare, retail, telecommunications, and utilities.  



  

At Integrity360, people come first. We invest heavily in learning, development and progression, fostering a dynamic culture where innovation, collaboration and continuous growth are at the heart of what we do. If you're ready to take your cyber security career to the next level, we’d love to hear from you.  



  

  

  

**Job Role / Responsibilities**

  

In this role, you will act as a Level 3 escalation point within the MDR/SOC function, providing advanced technical support to Level 2 analysts during complex or high\-severity investigations. You will be expected to bring deep operational knowledge across modern security technologies, including SIEM, EDR, Network Intrusion Detection Systems, SOAR, DLP and related security monitoring platforms.
  

  

The Principal SOC Analyst will support the investigation, containment and remediation of advanced threats, ensuring that incidents are analysed in the correct business and technical context. The role requires strong hands\-on experience in security operations, incident response, threat analysis and detection tuning, as well as the ability to work directly with customers and internal stakeholders to improve detection capability and strengthen cyber security posture.
  

  

You will contribute to the continuous improvement of the MDR service by supporting the definition of security monitoring strategies, improving detection logic, tuning security technologies, reviewing investigation processes and advising customers on technical optimisation opportunities. A strong understanding of malware behaviour, adversary tactics, techniques and procedures, and emerging threats will be critical to success.  



  

**Primary Duties/Responsibilities include:**

  

  

* Act as the Level 3 escalation point for advanced, complex or high\-impact security investigations.
* Support Level 2 analysts during complex investigations, providing technical guidance, validation and direction.
* Perform in\-depth analysis of security events, alerts, logs, endpoint telemetry, network traffic and other relevant data sources.
* Lead advanced incident investigations, including scoping, containment, eradication and remediation recommendations.
* Analyse malicious activity, suspicious files, attacker behaviour and adversary TTPs.
* Support customers from a technical perspective in the optimisation, tuning and improvement of their security monitoring capabilities.
* Review and improve SIEM, EDR, NIDS, SOAR and other security tool configurations to reduce false positives and improve detection quality.
* Contribute to the development and refinement of detection use cases, correlation rules, alerting logic and investigation playbooks.
* Support the definition of customer security monitoring strategies based on risk profile, threat landscape and available telemetry.
* Provide technical recommendations to strengthen customer cyber security posture and improve resilience against current and emerging threats.
* Conduct threat hunting and proactive analysis based on indicators, behaviours, intelligence and attack patterns.
* Document investigation findings, evidence, timelines, containment actions and remediation recommendations in a clear and structured manner.
* Prepare and deliver technical reports to customers, partners and internal stakeholders.
* Monitor trusted sources for emerging threats, vulnerabilities and adversary activity relevant to customer environments.
* Contribute to the continuous improvement of SOC processes, procedures, documentation and knowledge base material.
* Develop and maintain proficiency in Integrity360’s MDR technologies, processes, and service offerings, applying this knowledge to improve customer outcome and service
Support mentoring and technical development of Level 1 and Level 2 analysts, promoting best practices, investigative methodologies and operational excellence across the SOC.  
* 

  

  

  

  

**Desired Skills**

  

  

* Strong hands\-on experience in Security Operations Centre or MDR environments.
* Deep operational knowledge of SIEM, EDR, Network Intrusion Detection Systems, SOAR, DLP and related security monitoring technologies.
* Strong experience with security event triage, correlation, investigation and escalation.
* Ability to analyse endpoint, network, identity, cloud and application telemetry in support of complex investigations.
* Experience with SIEM query languages and detection logic, such as KQL, SPL, Sigma or equivalent.
* Experience tuning security controls and detection content to improve alert fidelity and reduce false positives.
* Strong understanding of attacker tactics, techniques and procedures, including MITRE ATT\&CK.
* Ability to perform host\-based and network\-based threat analysis.
* Experience analysing packet captures, endpoint artefacts, logs, scripts, documents and potentially malicious files.
* Strong understanding of incident response lifecycle, including preparation, identification, containment, eradication, recovery and lessons learned.
* Strong understanding of enterprise network architecture, TCP/IP, firewalls, proxies, VPNs, DNS, email security and cloud environments.
* Understanding of security protocols, encryption technologies and common authentication mechanisms.
* Experience supporting customer\-facing technical discussions, including investigation reviews, tuning recommendations and posture improvement activities.
* Ability to manage multiple complex incidents and make effective decisions under pressure.
* Strong written and verbal communication skills, with the ability to explain technical findings to both technical and non\-technical stakeholders.
* Experience with Microsoft Sentinel, Microsoft Defender, Splunk, QRadar, CrowdStrike, SentinelOne, Palo Alto, Suricata, Zeek, Snort or similar technologies is highly beneficial.
* Experience with cloud security monitoring across Microsoft Azure, AWS or Google Cloud is beneficial.
* Experience with threat hunting, detection engineering or purple team activities is beneficial.
Ability to produce clear technical documentation, investigation reports and customer\-facing recommendations.  
* 

  

  

**Certifications/Qualifications**

  

  

* Security industry certifications such as GCIH, GCFA, GCIA, GNFA, GCTI, GSEC, CISSP, CySA\+, SC\-200, AZ\-500 or equivalent are highly beneficial.
* Minimum 5 years of experience in cyber security, including experience in SOC, MDR, incident response, CSIRT or cyber security operations environments.
* Proven experience handling complex security incidents and supporting advanced investigations.
* Willingness and ability to undertake training on Integrity360's MDR solutions, platforms and operational methodologies.
Working knowledge of SIEM, EDR, SOAR, NIDS, DLP and threat intelligence platforms.  
* 

  

\#L1\-GB1

L3 SOC Analyst - Johannesburg

**Title:** Level 3 SOC Analyst


**Location:** Cape Town, 5 days a week onsite


**Work Hours:** 9\.00\-17\.30


**Job type:** Full\-Time Permanent


**Salary:** Negotiable / DOE  



  

  

  

**About Us**

  

Integrity360 is a leading independent cybersecurity and PCI specialist operating across Europe, Africa, the Caribbean, and North America. The company has office locations in Ireland, the UK, Bulgaria, Italy, Sweden, Spain, Lithuania, Ukraine, Africa, the Caribbean, and Canada, supported by seven Security Operations Centres (SOCs) located in Dublin, Sofia, Madrid, Stockholm, Rome, Johannesburg and Cape Town.  



  

With over 780 employees, including more than 585 dedicated cybersecurity professionals, Integrity360 delivers a full suite of professional, support, and managed security services. These span the complete cyber risk lifecycle, from identification and prevention to detection, response, and recovery. Integrity360 supports over 3000 mid\-market and enterprise organisations across sectors including financial services, insurance, government, healthcare, retail, telecommunications, and utilities.  



  

At Integrity360, people come first. We invest heavily in learning, development and progression, fostering a dynamic culture where innovation, collaboration and continuous growth are at the heart of what we do. If you're ready to take your cyber security career to the next level, we’d love to hear from you.  



  

  

  

**Job Role / Responsibilities**

  

In this role, you will act as a Level 3 escalation point within the MDR/SOC function, providing advanced technical support to Level 2 analysts during complex or high\-severity investigations. You will be expected to bring deep operational knowledge across modern security technologies, including SIEM, EDR, Network Intrusion Detection Systems, SOAR, DLP and related security monitoring platforms.
  

  

The Principal SOC Analyst will support the investigation, containment and remediation of advanced threats, ensuring that incidents are analysed in the correct business and technical context. The role requires strong hands\-on experience in security operations, incident response, threat analysis and detection tuning, as well as the ability to work directly with customers and internal stakeholders to improve detection capability and strengthen cyber security posture.
  

  

You will contribute to the continuous improvement of the MDR service by supporting the definition of security monitoring strategies, improving detection logic, tuning security technologies, reviewing investigation processes and advising customers on technical optimisation opportunities. A strong understanding of malware behaviour, adversary tactics, techniques and procedures, and emerging threats will be critical to success.  



  

**Primary Duties/Responsibilities include:**

  

  

* Act as the Level 3 escalation point for advanced, complex or high\-impact security investigations.
* Support Level 2 analysts during complex investigations, providing technical guidance, validation and direction.
* Perform in\-depth analysis of security events, alerts, logs, endpoint telemetry, network traffic and other relevant data sources.
* Lead advanced incident investigations, including scoping, containment, eradication and remediation recommendations.
* Analyse malicious activity, suspicious files, attacker behaviour and adversary TTPs.
* Support customers from a technical perspective in the optimisation, tuning and improvement of their security monitoring capabilities.
* Review and improve SIEM, EDR, NIDS, SOAR and other security tool configurations to reduce false positives and improve detection quality.
* Contribute to the development and refinement of detection use cases, correlation rules, alerting logic and investigation playbooks.
* Support the definition of customer security monitoring strategies based on risk profile, threat landscape and available telemetry.
* Provide technical recommendations to strengthen customer cyber security posture and improve resilience against current and emerging threats.
* Conduct threat hunting and proactive analysis based on indicators, behaviours, intelligence and attack patterns.
* Document investigation findings, evidence, timelines, containment actions and remediation recommendations in a clear and structured manner.
* Prepare and deliver technical reports to customers, partners and internal stakeholders.
* Monitor trusted sources for emerging threats, vulnerabilities and adversary activity relevant to customer environments.
* Contribute to the continuous improvement of SOC processes, procedures, documentation and knowledge base material.
* Develop and maintain proficiency in Integrity360’s MDR technologies, processes, and service offerings, applying this knowledge to improve customer outcome and service
Support mentoring and technical development of Level 1 and Level 2 analysts, promoting best practices, investigative methodologies and operational excellence across the SOC.  
* 

  

  

  

  

**Desired Skills**

  

  

* Strong hands\-on experience in Security Operations Centre or MDR environments.
* Deep operational knowledge of SIEM, EDR, Network Intrusion Detection Systems, SOAR, DLP and related security monitoring technologies.
* Strong experience with security event triage, correlation, investigation and escalation.
* Ability to analyse endpoint, network, identity, cloud and application telemetry in support of complex investigations.
* Experience with SIEM query languages and detection logic, such as KQL, SPL, Sigma or equivalent.
* Experience tuning security controls and detection content to improve alert fidelity and reduce false positives.
* Strong understanding of attacker tactics, techniques and procedures, including MITRE ATT\&CK.
* Ability to perform host\-based and network\-based threat analysis.
* Experience analysing packet captures, endpoint artefacts, logs, scripts, documents and potentially malicious files.
* Strong understanding of incident response lifecycle, including preparation, identification, containment, eradication, recovery and lessons learned.
* Strong understanding of enterprise network architecture, TCP/IP, firewalls, proxies, VPNs, DNS, email security and cloud environments.
* Understanding of security protocols, encryption technologies and common authentication mechanisms.
* Experience supporting customer\-facing technical discussions, including investigation reviews, tuning recommendations and posture improvement activities.
* Ability to manage multiple complex incidents and make effective decisions under pressure.
* Strong written and verbal communication skills, with the ability to explain technical findings to both technical and non\-technical stakeholders.
* Experience with Microsoft Sentinel, Microsoft Defender, Splunk, QRadar, CrowdStrike, SentinelOne, Palo Alto, Suricata, Zeek, Snort or similar technologies is highly beneficial.
* Experience with cloud security monitoring across Microsoft Azure, AWS or Google Cloud is beneficial.
* Experience with threat hunting, detection engineering or purple team activities is beneficial.
Ability to produce clear technical documentation, investigation reports and customer\-facing recommendations.  
* 

  

  

**Certifications/Qualifications**

  

  

* Security industry certifications such as GCIH, GCFA, GCIA, GNFA, GCTI, GSEC, CISSP, CySA\+, SC\-200, AZ\-500 or equivalent are highly beneficial.
* Minimum 5 years of experience in cyber security, including experience in SOC, MDR, incident response, CSIRT or cyber security operations environments.
* Proven experience handling complex security incidents and supporting advanced investigations.
* Willingness and ability to undertake training on Integrity360's MDR solutions, platforms and operational methodologies.
Working knowledge of SIEM, EDR, SOAR, NIDS, DLP and threat intelligence platforms.  
* 

  

\#L1\-GB1

Cyber Security Jobs in Sandton - Page 6

Vacancies (page 6 of 6)