What Cybersecurity Strategy Jobs are in South Africa?

Information Security Management System (ISMS) Manager - Johannesburg (Hybrid) - R40 000 - R45 000

Lead the organisation's information security governance, enterprise risk management, and regulatory compliance activities within a highly regulated environment.

About Our Client
The organisation operates within a highly regulated sports betting or a similarly stringent digital transaction environment. The business focuses on effectively managing security, risk, and compliance obligations across multiple international jurisdictions.

The Role: Information Security Management System (ISMS) Manager
The purpose of the role is to lead the organisation's information security governance, enterprise risk management, and regulatory compliance activities within a highly regulated environment. The main focus areas are establishing, maintaining, and continuously improving the organisation's ISO 27001-aligned Information Security Management System, while providing strategic oversight of cyber risk, operational risk, and control effectiveness.

Key Responsibilities

• Manage 5-8 years of experience within a sports betting or a similarly stringent digital transaction environment while leading the design, implementation, and continuous enhancement of the organisation's Enterprise Risk Management framework in alignment with ISO 31000 and business strategy.

• Own the enterprise-wide risk management process, ensuring risks are identified, assessed, prioritised, mitigated, monitored, and reported effectively across all business functions.

• Maintain management oversight of compliance with standards and regulations including POPIA, GDPR, and UKGC requirements.

• Coordinate regulatory and certification audits across internal teams, external service providers, and international stakeholders.

• Chair and facilitate risk assessment workshops with business and technical stakeholders, driving accountability for risk ownership and treatment actions.

• Prepare and present clear, concise, and data-driven reports to executive management and the Audit and Risk Committee on risk exposure, audit outcomes, security maturity, and remediation status.

• Build and maintain strong cross-functional relationships with Technology, Product, Operations, Legal, Compliance, and executive leadership to embed risk-aware decision-making.

About You

• 5-8 years experience within a sports betting or a similarly stringent digital transaction environment.

• Tertiary qualification (bachelor's degree or higher) in Information Technology, Cyber Security, Risk Management, or a cognate discipline.

• Hold professional certifications such as Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), or ISO 27001 Lead Implementer/Auditor.

• Demonstrate excellent comprehension of international compliance frameworks and the operational mechanics within the industry.

• Possess exceptional analytical acumen and the capacity to articulate complex technical and risk-related paradigms to non-technical stakeholders.

• Bachelor's Degree or relevant tertiary qualification in Information Technology, Cyber Security, Computer Science, or a related field.
• Minimum of 8 years' experience in Cyber Security roles with a proven track record of delivering against business objectives and strategic outcomes.
• At least 5 years' experience in Cyber Security Governance, Risk Management, Controls, and Compliance within a technology-driven environment.
• A minimum of 35 years' experience in IT Audit and Assurance Management within a cyber security or broader technology environment.
• Strong knowledge of industry-recognized information security and compliance frameworks, including ISO/IEC 27001, SOC 2, SOX, ITIL, COBIT, and NIST .
• Sound understanding of legal, regulatory, and privacy requirements, including Personally Identifiable Information (PII) Protection and Payment Card Industry Data Security Standard (PCI-DSS) compliance.
• High-level understanding of Cloud Security Risk, Compliance, and Assurance principles and practices.
• Demonstrated experience in managing and overseeing multiple cyber security programmes, projects, and strategic initiatives simultaneously.
• Proven ability to think strategically, influence stakeholders, and drive organisational change.
• Deep understanding of technology security risks and associated mitigation strategies, particularly within GSM Network Infrastructure environments.
• Broad cyber security expertise across multiple domains, including:
  • Layered security architecture
  • Internet protocols and network security
  • Firewalls and VPN technologies
  • Intrusion Detection and Prevention Systems (IDS/IPS)
  • Network Access Control (NAC) and network segmentation
  • Anti-malware and anti-spam technologies
  • Risk and vulnerability assessments
  • Regulatory and compliance management
• Strong knowledge of security concepts related to DNS, routing, authentication, proxy services, VPNs, and DDoS mitigation technologies .
• Hands-on experience with Windows, UNIX, and Linux operating systems .
• Comprehensive understanding of Web Security, Encryption Technologies, and Secure Communication Protocols .

• Competitive salary and benefits package
• Opportunity to shape and influence security strategy
• Work with modern technologies and cloud environments
• Career growth within a dynamic and innovative business
• Hybrid working environment

• 5+ years' experience in Cybersecurity, Information Security, or IT Risk
• Previous experience in a leadership or management role
• Strong knowledge of security frameworks, governance, and compliance
• Experience with incident response, vulnerability management, and security operations
• Relevant certifications such as CISSP, CISM, CEH, or equivalent preferred
• Strong understanding of cloud security and modern cyber threats

The ideal applicant will assist clients with their compliance by providing professional food safety consulting and training services.

Requirements:

• Must have a food-related Diploma or Degree (Diploma in Food Technology, Degree in Food Science or Food Microbiology, Customer Science, or a B.Sc in Agriculture.
• At least 5 years of experience in the food industry managing Food Safety Systems such as FSSC 22000, BRCGS, HACCP, GLOBALG, A.P and SIZA.
• SAATCA Accredited Trained Food Safety Lead Auditor will be an advantage.
• Must be fluent in English and Afrikaans.
• Proficiency in Word, Excel and PowerPoint.
• Own Vehicle and Valid drivers license.
• Willing to work remotely.

• Conduct comprehensive penetration tests on web applications, APIs, mobile applications, and network infrastructure.
• Perform vulnerability assessments and security audits to identify security weaknesses.
• Utilize a variety of penetration testing tools and methodologies (e.g., OWASP Top 10, PTES).
• Develop detailed reports outlining identified vulnerabilities, their potential impact, and actionable remediation recommendations.
• Collaborate with development and IT teams to ensure timely and effective remediation of security findings.
• Stay current with the latest penetration testing techniques, tools, and threat landscapes.
• Assist in developing and refining penetration testing methodologies and playbooks.
• Contribute to the overall security posture improvement of the organization.
• Document testing procedures and findings meticulously.
• Engage in continuous learning and skill development in offensive security.

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• Minimum of 3 years of experience specifically in penetration testing and vulnerability assessment.
• Proven experience with common penetration testing tools such as Metasploit, Burp Suite, Nmap, and Kali Linux.
• Strong understanding of web application security, network protocols, and operating system vulnerabilities.
• Familiarity with scripting languages (e.g., Python, Bash) for tool augmentation and exploit development.
• Excellent analytical and problem-solving skills.
• Strong written and verbal communication skills, with the ability to clearly articulate technical findings.
• Ability to work independently and manage time effectively in a remote setting.
• Ethical hacking certifications such as OSCP, CEH, or CREST are highly advantageous.
• A portfolio of past penetration testing engagements or bug bounty disclosures is a plus.

• Annual salary of R .
• Full remote work flexibility.
• Comprehensive health and wellness benefits.
• Generous professional development budget for conferences and training.
• Company-provided equipment and home office setup allowance.
• Performance bonuses.
• Paid time off and company holidays.
• Collaborative and innovative virtual work environment.
• Retirement savings plan.

Our client, a well-established manufacturing firm located in Port Elizabeth , is seeking a diligent and detail-oriented Information Security Officer with a focus on Policy and Governance. This role is crucial for ensuring that our organization's information security practices align with legal requirements, industry standards, and internal policies. The successful candidate will be responsible for developing, implementing, and maintaining a robust information security governance framework. This includes creating and updating security policies, conducting risk assessments, managing compliance initiatives, and promoting security awareness across the company. You will play a key part in protecting sensitive company data and ensuring operational resilience. This is an on-site position in Port Elizabeth , requiring a dedicated individual to champion security best practices.

• Develop, implement, and maintain information security policies, standards, and procedures.
• Conduct regular risk assessments and gap analyses to identify security vulnerabilities.
• Ensure compliance with relevant legislation and industry regulations (e.g., POPIA).
• Manage and coordinate internal and external security audits.
• Develop and deliver security awareness training programs for all employees.
• Oversee the implementation of security controls and monitor their effectiveness.
• Act as the primary point of contact for information security governance and compliance matters.
• Investigate and report on security incidents, recommending and implementing corrective actions.
• Maintain documentation related to information security governance and compliance.
• Stay updated on emerging threats and security best practices relevant to the manufacturing sector.

• Bachelor's degree in Information Technology, Computer Science, or a related field.
• Minimum of 4 years of experience in information security, with a strong emphasis on policy development, governance, and compliance.
• Solid understanding of information security principles and frameworks (e.g., ISO 27001, NIST).
• Knowledge of data privacy regulations such as POPIA.
• Experience in conducting risk assessments and managing audit processes.
• Excellent written and verbal communication skills, with the ability to draft clear and concise policies.
• Strong analytical and problem-solving abilities.
• Ability to work independently and collaboratively within a team environment.
• Must be available to work full-time at our Port Elizabeth facility.

Our client offers a competitive salary, an annual performance bonus, and a comprehensive benefits package including medical aid and a retirement annuity. Opportunities for professional development and further training in security governance are provided. Employees will be part of a stable and reputable company with a focus on continuous improvement. This role is based at our Port Elizabeth headquarters, offering a stable and rewarding career path.