Cyber Incident Response Lead — Crisis Commander & Recovery

SGS; Centurion; On-site; ZAR 900,000 - 1,300,000; Full time

Job summary

SGS is seeking an experienced Incident Response Manager to lead the cybersecurity incident response program for clients. You will drive rapid detection, containment, eradication, and recovery from security incidents while minimizing business impact.

You will coordinate across IT, security, legal, and executives and act as the primary contact during cyber crises. The role requires a track record in incident response, SOC operations, and strong knowledge of network security and forensics, with

Qualifications

• 3+ years of incident response, SOC operations, or cybersecurity management.
• Bachelor's degree in Computer Science and Informatics.
• Honours degree in Computer Science (Specialising in Cybersecurity).
• GIAC Certified Forensic Analyst (GCFA).
• Strong knowledge of network security, malware analysis, and digital forensics.
• Familiarity with regulatory frameworks (POPIA, GDPR, PCI DSS).
• Excellent leadership, communication, and crisis management skills.

Responsibilities

• Lead the response to cybersecurity incidents, including triage, containment, eradication, and recovery.
• Coordinate communication between technical teams, executives, and external stakeholders.
• Oversee security monitoring tools (SIEM, IDS/IPS, endpoint detection).
• Ensure timely detection of suspicious activity and potential breaches.
• Direct forensic analysis of compromised systems.
• Preserve evidence for legal or regulatory purposes.
• Document root cause analysis and lessons learned.
• Work closely with IT, legal, compliance, and executive leadership during incidents.
• Provide clear, concise updates to stakeholders.
• Liaise with external partners such as law enforcement, regulators, and vendors.
• Conduct incident response drills and tabletop exercises.
• Train staff on security awareness and escalation procedures.
• Continuously improve incident response capabilities.

Skills

Leadership

Crisis management

Communication

Team coordination

Incident response

Education

Bachelor's degree in Computer Science and Informatics

Honours degree in Computer Science (Specialising in Cybersecurity)

Tools

SIEM

IDS/IPS

Endpoint detection

Digital forensics

GCFA

Job description

SGS is seeking an experienced Incident Response Manager to lead the cybersecurity incident response program for clients. You will drive rapid detection, containment, eradication, and recovery from security incidents while minimizing business impact.

You will coordinate across IT, security, legal, and executives and act as the primary contact during cyber crises. The role requires a track record in incident response, SOC operations, and strong knowledge of network security and forensics, with