111 Security Consultant jobs in South Africa

About the Role

We are seeking a highly experienced
Senior Vulnerability Management Specialist
 to lead patching activities across a large-scale enterprise environment. The role requires deep technical expertise, leadership capability, and the ability to work under pressure in a complex IT landscape.

You will play a critical role in ensuring that our client's IT infrastructure remains secure, compliant, and resilient. The environment is Windows-based with over multiple servers, and you will coordinate regular patching cycles, vulnerability management, and compliance reporting in line with both internal and external requirements.

Key Responsibilities

• Lead and coordinate regular patching cycles across endpoints, servers, and network devices.
• Ensure compliance with internal security policies and external regulatory requirements.
• Manage patching and remediation in line with the client's
  patching cycles and vulnerability reports.
• Assist internal IT teams with server hardening and patch deployment.
• Coordinate with third-party application vendors where patching and vulnerability management requires vendor input.

Requirements

• 8+ years' experience in IT security with a strong focus on vulnerability and patch management.
• Proven expertise in Windows server environments.
• Strong knowledge of security standards, frameworks, and regulatory compliance.
• Experience with enterprise patch management tools and processes.
• Ability to lead patching projects in large, complex organisations.
• Strong communication and stakeholder engagement skills.
• Certifications in Windows security

About Us
Integrity360 is the largest independent cyber security provider in Europe, with a growing international presence spanning the UK, Ireland, mainland Europe, Africa and the Caribbean. With over 700 employees, across 12 locations, and six Security Operations Centres (SOCs)—including locations in Dublin, Sofia, Stockholm, Madrid, Naples and Cape Town—we support more than 2,500 clients across a wide range of industries.

Over 80% of our team are technical experts, focused on helping clients proactively identify, protect, detect and respond to threats in an ever-evolving cyber landscape. Our security-first approach positions cyber resilience as a business enabler, empowering organisations to operate with confidence.

At Integrity360, people come first. We invest heavily in learning, development and progression, fostering a dynamic culture where innovation, collaboration and continuous growth are at the heart of what we do. If you're ready to take your cyber security career to the next level, we'd love to hear from you.

Job Role

The Senior QSA Consultant Will Lead Security Consultancy Engagements And Pre-sales Processes With Clients Within Financial Services And Payment Card Industries. Focusing On Delivery Of Payment Compliance Services, Which Include But Are Not Limited To

• PCI specialized assessment (PIN, P2PE, SSF, 3DS, etc.)
• PCI DSS, Swift, PSD2 assessments
• GAP Analysis
• Policy and Procedure review

Primary Duties/Responsibilities Include
Pre-Sales

• Starting from the information received from the sales team, independently carry out the estimate of the effort required to deliver a security services, reporting the result to the regional lead for approval.
• Lead customer engagements and provide senior cyber security advice and services to a broad range of clients and industries. Provide detailed analytical reporting, internal reporting metrics and program management. Provide leadership and mentorship to Junior consultants.

Delivery

• Prepares, organizes and supports delivery by team members of engagements offsite or at customer premises including but not limited to gap analysis, security assessment, risk and/or compliance assessment using one or more industry or regulatory standard or framework.

Processes and Documentation

• Assesses compliance related documentation including policies, procedures, standards and legislative directives.
• Provides remediation support and guidance on the security aspects of the administration and maintenance of processes & documentation, infrastructure components, applications, services and security systems.
• Delivers detailed reports following Integrity360's reporting best practice and templates.
• Ensure QA process for Payments Compliance standards is initiated and applied for relevant projects, in cooperation with QA and Backoffice team.
• Establishes new standards and reviews existing documentation to ensure the correct application of the processes.
• In cooperation with Practice Lead(s), estimating, planning & monitoring team budget.
• Provide regular status update to internal stakeholders (Practice Lead(s), PMO).
• Participate in continuous improvement of internal processes (reporting tools, assessment automation etc.)

Communication

• Participates to external conferences and promotes Integrity360 by identifying important Industry events.
• Support marketing activities related to existing Professional Service portfolio and customer acquisition working in collaboration with marketing team.
• Act as a communication point between regional team, other professional services teams, Customer Success and other departments.
• Supports sales team in development and effort estimations for new opportunities (e.g. new and evolving industry standards).
• Stay up-to-date on developments in the Payments Compliance realm, understanding new standards and regulations and their impact on Integrity360.

Required Skills

• Relevant Experience in Fintech industry and security standards & directives consultancy services (PCI DSS, PSD2, ISO 27001, SWIFT, etc.)
• Cryptography techniques including algorithms, key management, and key lifecycle.
• Public key infrastructure (PKI) and the role and operations of a Certification Authority (CA) and Registration Authority (RA).
• Hardware security modules (HSMs) operations, policies, and procedures.
• POI key-injection systems and techniques including key-loading devices (KLDs) and key management methods, such as Master/Session or DUKPT.
• Physical security techniques for high-security areas.
• Authentication methods and techniques.
• Security Integrity controls.
• Computer Networking (routing, switching, firewall network filtering).
• Operating Systems hardening and administration (Linux/Unix, Windows).

Core Competencies

• Problem Solving (analysis, helicopter view, problem setting, decision making).
• Planning and Organization (time management, scheduling and control).
• Communication (clearness, listening, persuasion, negotiation, public speaking).
• Networking (reinforce relationships, use emotional intelligence and personal proximity).
• Results Orientation (delivering solutions, work under pressures).
• Leading and Empowering People (self-confidence, establishing focus, providing motivational support and feedback, fostering teamwork and integration).
• Economic Sensitivity (Economic variables evaluation, Profit & Loss dynamics).

Certifications/Qualifications

• Qualified Security Assessor (QSA) is a must.

Title: Senior Security Consultant (QSA)

Location: Cape Town or Johannesburg, South Africa

Job type: Full-Time Permanent

Salary: Negotiable / DOE

About Us

Integrity360 is the largest independent cyber security provider in Europe, with a growing international presence spanning the UK, Ireland, mainland Europe, Africa and the Caribbean. With over 700 employees, across 12 locations, and six Security Operations Centres (SOCs)—including locations in Dublin, Sofia, Stockholm, Madrid, Naples and Cape Town—we support more than 2,500 clients across a wide range of industries.

Over 80% of our team are technical experts, focused on helping clients proactively identify, protect, detect and respond to threats in an ever-evolving cyber landscape. Our security-first approach positions cyber resilience as a business enabler, empowering organisations to operate with confidence.

At Integrity360, people come first. We invest heavily in learning, development and progression, fostering a dynamic culture where innovation, collaboration and continuous growth are at the heart of what we do. If you're ready to take your cyber security career to the next level, we’d love to hear from you.

Job Role

The Senior QSA Consultant will lead security consultancy engagements and pre-sales processes with clients within financial services and payment card industries. Focusing on delivery of Payment Compliance services, which include but are not limited to:

· PCI specialized assessment (PIN, P2PE, SSF, 3DS, etc.)

· PCI DSS, Swift, PSD2 assessments

· GAP Analysis

· Policy and Procedure review

Primary Duties/Responsibilities include:

Pre-Sales

· Starting from the information received from the sales team, independently carry out the estimate of the effort required to deliver a security services, reporting the result to the regional lead for approval.

· Lead customer engagements and provide senior cyber security advice and services to a broad range of clients and industries. Provide detailed analytical reporting, internal reporting metrics and program management. Provide leadership and mentorship to Junior consultants.

Delivery

· Prepares, organizes and supports delivery by team members of engagements offsite or at customer premises including but not limited to gap analysis, security assessment, risk and/or compliance assessment using one or more industry or regulatory standard or framework.

Processes and Documentation

· Assesses compliance related documentation including policies, procedures, standards and legislative directives.

· Provides remediation support and guidance on the security aspects of the administration and maintenance of processes & documentation, infrastructure components, applications, services and security systems.

· Delivers detailed reports following Integrity360’s reporting best practice and templates.

· Ensure QA process for Payments Compliance standards is initiated and applied for relevant projects, in cooperation with QA and Backoffice team.

· Establishes new standards and reviews existing documentation to ensure the correct application of the processes.

· In cooperation with Practice Lead(s), estimating, planning & monitoring team budget.

· Provide regular status update to internal stakeholders (Practice Lead(s), PMO).

· Participate in continuous improvement of internal processes (reporting tools, assessment automation etc.)

Communication

· Participates to external conferences and promotes Integrity360 by identifying important Industry events.

· Support marketing activities related to existing Professional Service portfolio and customer acquisition working in collaboration with marketing team.

· Act as a communication point between regional team, other professional services teams, Customer Success and other departments.

· Supports sales team in development and effort estimations for new opportunities (e.g. new and evolving industry standards).

· Stay up-to-date on developments in the Payments Compliance realm, understanding new standards and regulations and their impact on Integrity360.

Required Skills

· Relevant Experience in Fintech industry and security standards & directives consultancy services (PCI DSS, PSD2, ISO 27001, SWIFT, etc.)

· Cryptography techniques including algorithms, key management, and key lifecycle.

· Public key infrastructure (PKI) and the role and operations of a Certification Authority (CA) and Registration Authority (RA)

· Hardware security modules (HSMs) operations, policies, and procedures

· POI key-injection systems and techniques including key-loading devices (KLDs) and key management methods, such as Master/Session or DUKPT

· Physical security techniques for high-security areas

· Authentication methods and techniques

· Security Integrity controls

· Computer Networking (routing, switching, firewall network filtering)

· Operating Systems hardening and administration (Linux/Unix, Windows) .

Core Competencies

· Problem Solving (analysis, helicopter view, problem setting, decision making)

· Planning and Organization (time management, scheduling and control)

· Communication (clearness, listening, persuasion, negotiation, public speaking)

· Networking (reinforce relationships, use emotional intelligence and personal proximity)

· Results Orientation (delivering solutions, work under pressures)

· Leading and Empowering People (self-confidence, establishing focus, providing motivational support and feedback, fostering teamwork and integration)

· Economic Sensitivity (Economic variables evaluation, Profit & Loss dynamics)

Certifications/Qualifications

• Qualified Security Assessor (QSA) is a must

Join to apply for the Security Consultant-Verify Directory role at Blue Pearl

4 days ago Be among the first 25 applicants

Join to apply for the Security Consultant-Verify Directory role at Blue Pearl

Position Overview

We are seeking an experienced

Job Description

Position Overview

We are seeking an experienced VERIFY DIRECTORY Consultant to provide expert-level support and services for the configuration, deployment, and support of the VERIFY DIRECTORY solution. This position is delivered on a staff augmentation basis and will work under the direction of the CLIENT’s Project Manager or Team Leader. You will collaborate closely with CLIENT’s internal technical teams to deliver solution recommendations, configuration support, and issue resolution during testing and implementation phases.

Key Responsibilities

Project Support Services

• Provide technical recommendations to support VERIFY DIRECTORY resolution efforts and align the solution with CLIENT’s business requirements and objectives.
• Assist in the implementation and configuration of new functions or enhancements for the IBM VERIFY DIRECTORY solution.
• Support CLIENT during their testing activities by identifying and resolving VERIFY DIRECTORY-related issues.
• Collaborate with CLIENT technical staff to ensure knowledge transfer, mentoring, and support continuity.
• Assist in the installation or patching of VERIFY DIRECTORY and its supporting middleware.
• Provide product usage guidance and best practices related to CLIENT-specific use cases.
• Recommend design and implementation approaches for new feature functions as required.
• Document and report work progress, issues, and planned activities via Consultant Project Journals.
  
  

• Summary of completed tasks during the current reporting period.
• Planned tasks for the next reporting period.
• Issues encountered and resolution steps taken.
• Hours worked for the current period.
• Delivered in softcopy format to the CLIENT.
  
  

• IBM VERIFY DIRECTORY is the only IBM product in-scope for this engagement.
• Services do not include installation/configuration of non-IBM technologies such as Oracle databases, third-party hardware, network devices (e.g., firewalls, switches), OS systems, or patches.
• No other IBM products will be supported beyond VERIFY DIRECTORY unless explicitly stated.
• CLIENT will handle all project management tasks including scheduling, planning, and activity direction.
• No formal training materials or courseware will be provided; information transfer is informal and occurs during regular collaboration.
  
  

• Proven hands-on experience with IBM VERIFY DIRECTORY including configuration, deployment, and patching.
• Strong understanding of directory services, LDAP, identity management, and middleware technologies.
• Demonstrated experience supporting enterprise deployments of identity or directory solutions.
• Ability to interpret and respond to CLIENT-specific use cases with tailored solution recommendations.
• Experience working in a staff augmentation or client-directed consulting environment.
• Strong problem-solving and issue-resolution skills during testing and deployment activities.
• Excellent communication and documentation skills, especially in delivering informal training or mentoring.
  
  

• IBM Certified in VERIFY DIRECTORY or related identity management technologies.
• Experience working in hybrid environments (cloud/on-prem) or large enterprise IT ecosystems.
• Familiarity with related IBM IAM (Identity and Access Management) solutions is a plus.
  
  

• Seniority level Mid-Senior level

• Employment type Full-time

• Job function Information Technology
• Industries IT Services and IT Consulting

Referrals increase your chances of interviewing at Blue Pearl by 2x

Get notified about new Security Consultant jobs in Johannesburg, Gauteng, South Africa .

Illovo, Gauteng, South Africa 1 month ago

Randburg, Gauteng, South Africa 1 week ago

Illovo, Gauteng, South Africa 9 months ago

Johannesburg, Gauteng, South Africa 2 months ago

Johannesburg, Gauteng, South Africa 1 week ago

Johannesburg, Gauteng, South Africa 4 days ago

Johannesburg, Gauteng, South Africa 5 days ago

Johannesburg Metropolitan Area 1 week ago

Johannesburg Metropolitan Area 4 days ago

Johannesburg, Gauteng, South Africa ZAR560,000.00-ZAR600,000.00 1 week ago

Johannesburg Metropolitan Area 6 days ago

Johannesburg, Gauteng, South Africa 1 week ago

Midrand, Gauteng, South Africa 3 weeks ago

Johannesburg, Gauteng, South Africa 4 months ago

Johannesburg, Gauteng, South Africa ZAR660,000.00-ZAR960,000.00 4 months ago

Johannesburg, Gauteng, South Africa 3 days ago

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.

My client in the financial industry is looking for a Cyber Security Specialist.

The role of the Cyber Security Consultant: Operations will form part of the team which focuses on Cyber Security Operations services to businesses on the Shared Network. This team is responsible for management of the PKI, Anti-Virus, Vulnerability Management, Security Configuration Management, Firewall compliance, and Web and Email content filtering environments. The team also manages the Data Leakage Prevention, Network Access Management, and Privileged Account Management infrastructure and processes.

What will you be responsible for?

On a day-to-day basis, the Consultant will be involved with the configuration, monitoring, and management of:

• Anti-Virus Infrastructure
• Data Leakage Prevention system, rules, and reports
• Privileged Account Management process
• Network Access Control - process and exception handling
• Vulnerability Scanning, reporting, proposing remediation actions, and tracking compliance
• Security hardening baseline compliance scanning, reporting, and remediation

On an ad hoc basis, the consultant will support businesses in:

• Issuing, renewing, and revoking PKI digital certificates.
• Assessing internet and email use on request of Forensics or HR departments.
• Performing scheduled tasks like reviewing Firewall rule configuration and reporting.

The consultant will be required to report on the status of the cyber security control environments on a weekly, monthly, and quarterly basis.

The consultant will continuously consider ways to improve the effectiveness and efficiency of monitoring and response controls.

The consultant will contribute to the knowledge and skills of the team by sharing lessons learned and knowledge gained through research, conferences, training courses, or interaction with experts.

Qualifications

• Matric
• Information Technology diploma or degree
• Information Security certification (preferable)

Experience

At least 3 - 5 years in hands-on technical experience which includes:

• Network experience (TCP/IP, Firewalls, IPS, NAC)
• Anti-Virus System management and Configuration
• Data Leakage Prevention tool configuration
• Logical Access Management (AD, PAM)
• Information Security Operations (Security+, CISSP will be beneficial)
• Vulnerability Management (use of well-known vulnerability scanning tools and interpretation of CVSS scores)

Required Skills

• Security Auditing
• Reporting and Administration
• Security tools monitoring

The role of the Cyber Security Consultant: Operations will form part of our client’s team which focuses on Cyber Security Operations services to businesses on our client’s Shared Network. This team is responsible for management of the PKI, Anti-Virus, Vulnerability Management, Security Configuration Management, Firewall compliance, Web, and Email content filtering environments. The team also manages the Data Leakage Prevention, Network Access Management and Privileged Account Management infrastructure and processes.

• On a day-to-day basis the Consultant will be involved with the configuration, monitoring, and management of:
• Anti-Virus Infrastructure
• Data Leakage Prevention system, rules, and reports
• Privileged Account Management process
• Network Access Control process and exception handling.
• Vulnerability Scanning, reporting, proposing remediation actions and tracking compliance.
• Security hardening baseline compliance scanning, reporting and remediation.
• On an ad hoc basis the consultant will support businesses in:
• Issuing, renewing, and revoking PKI digital certificates.
• Assessing internet and email use on request of Forensics or HR departments.
• The consultant will also be performing scheduled tasks like review Firewall rule configuration and report.
• The consultant will be required to report on the status of the cyber security control environments on a weekly, monthly, and quarterly basis.
• The consultant will continuously consider ways to improve the effectiveness and efficiency of monitoring and response controls.
• The consultant will contribute to Knowledge and Skills of the team, by sharing lessons learned and knowledge gained through research, conferences, training courses or through interaction with experts.

• Matric
• Information Technology diploma or degree
• Information Security certification (preferable)

At least 3 – 5 years in hands-on technical experience which includes:

• Network experience (TCP/IP, Firewalls, IPS, NAC)
• Operating System management and Hardening (Windows, Linux, CIS hardening baselines)
• Anti-Virus System management and Configuration
• Data Leakage Prevention tool configuration
• Logical Access Management (AD, PAM)
• Information Security Operations (Security+, CISSP will be beneficial)
• Vulnerability Management (use of well-known vulnerability scanning tools and interpretation of CVSS scores)

• Security Auditing.
• Risk management.
• Incident Investigation.
• Reporting and Administration.
• Security tools monitoring.

• Interpersonal savvy - Contributing independently.
• Decision quality - Contributing independently.
• Plans and aligns - Contributing independently.
• Optimises work processes - Contributing independently.

• Cultivates innovation - Contributing independently.
• Customer focus - Contributing independently.
• Drives results - Contributing independently.
• Collaborates - Contributing independently.
• Being resilient - Contributing independently.

Market related - Monthly