Minimum Qualifications

• An appropriate, recognised qualification at NQF Level 7 or equivalent.
• A relevant NQF level 8 qualification will be an advantage.
• CISSP, CSIM, and CASP+ certification will be an advantage.

Minimum Experience

• Eight years’ relevant work experience within a cybersecurity environment.

Knowledge, skills and competencies

• Encryption and Cryptography.
• Incident response and Forensics.
• Risk management.
• Security architecture and design.
• Security frameworks and standards.
• Threat detection and response.
• Vulnerability management.
• Problem solving.
• Stakeholder engagement.

Key performance areas:

• Design enterprise-wide security frameworks and solutions aligned with organisational goals and compliance requirements.
• Ensure architecture supports scalability, resilience, and adaptability to emerging threats.
• Perform white box penetration testing and vulnerability scans and oversee grey/black box penetration testing and vulnerability scans.
• Design, implement and maintain appropriate solutions.
• Research, evaluate, and recommend emerging security technologies.
• Work with ICT, DevOps, and software development teams to embed security in system designs.
• Support internal and external audits by providing detailed documentation and evidence of security controls.
• Prepare reports on incident responses, vulnerabilities, and system performance.
• Prepare accurate budget forecasts for cybersecurity projects and tools.
• Work with the procurement team to evaluate, negotiate, and manage contracts for security tools and services.
• Assess and plan for the financial scalability of cybersecurity solutions as the organisation grows.
• Establish monitoring processes for system performance and security metrics.
• Conduct risk assessments to identify vulnerabilities and prioritise remediation efforts.
• Establish and maintain security policies, standards, procedures and guidelines.
• Promote cybersecurity awareness and training programs across all units.
• Work closely with business to align cybersecurity goals with the overall business strategy.