CSOC Manager: Cyber Security Operations Leader

Sars; Pretoria; On-site; ZAR 1,200,000 - 1,800,000; Full time

Job summary

SARS in Pretoria is seeking a Manager for the Cyber Security Operations Centre (CSOC) and User Access Management (UAM). You will lead the SOC, monitor threats, manage incident response, and strengthen identity and access controls to protect information assets and services.

You will oversee internal teams and external security service providers, drive governance, risk management and security operations aligned with business objectives and regulatory requirements.

Qualifications

• Bachelor's degree in Information Security or related field with 8–10 years IT security experience.
• 3–4 years at junior management level and professional certification in Information Security Management.
• CISM or CISSP or equivalent certification required.

Responsibilities

• Lead CSOC and UAM functions ensuring monitoring, detection, and response to threats.
• Oversee governance, risk and compliance across security operations.
• Manage internal teams and external service providers to deliver service excellence.
• Align security operations with organisational goals and regulatory requirements.

Skills

Leadership

SOC operations

Incident response

IAM

Governance

Stakeholder management

Education

Bachelor's Degree / Advanced Diploma (NQF 7) Information Security

CISM Certification

CISSP Certification

Job description

SARS in Pretoria is seeking a Manager for the Cyber Security Operations Centre (CSOC) and User Access Management (UAM). You will lead the SOC, monitor threats, manage incident response, and strengthen identity and access controls to protect information assets and services.

You will oversee internal teams and external security service providers, drive governance, risk management and security operations aligned with business objectives and regulatory requirements.