Cyber Security Lead

Sabenza IT & Recruitment; Johannesburg; On-site; ZAR 600 000 - 900 000; Full time

Job summary

A leading cybersecurity recruitment firm seeks an experienced individual for a temporary role in Johannesburg, responsible for managing cyber threats, incident response, and team leadership. Ideal candidates should have 10-15 years' experience in cyber security operations and proficiency in incident management and SIEM. The role is critical in overseeing security monitoring, vendor management, and enhancing security processes to protect the organization from cyber risks.

Qualifications

• 10-15 years' experience in leading cyber security operations.
• Proficient in Incident Management and Response.
• Experience in security device management and SIEM.

Responsibilities

• Responsible for security event monitoring, management, and response.
• Ensure incident identification, assessment, quantification, reporting, and monitoring.
• Revise and develop processes to strengthen the Security Operations Framework.

Skills

Incident Management

Threat Management

Stakeholder Management

Communication

Technical Capability

Education

Matric and a Tertiary degree

Tools

SIEM

Security Devices

Job description

Overview

Johannesburg, South Africa | Posted on 23/01/2026

This role is accountable for the detection, response andrecovery services related to Cyber Security. It is a temporary role which willhand over to the final permanent candidate that will be in place by the end ofthis contract. The individual would need to manage cyber related threats(actual or perceived), as well as be able to build and sustain a team thataddresses these threats through the lifecycle. The individual will beresponsible for threat intelligence, incident management, identity and access management,incident response, advanced threat detection, application security and cybersecurity assurance.

Responsibilities:

• Primarily responsible for security event monitoring,management, and response
• Ensure incident identification, assessment,quantification, reporting, communication, mitigation, and monitoring
• Ensure compliance to SLA and process adherence to achieveoperational objectives across all service partners appointed.
• Revise and develop processes to strengthen the currentSecurity Operations Framework, review policies and highlight the challenges inmanaging SLAs.
• Responsible for team & vendor management, overall useof resources and initiation of corrective action where required for theSecurity Operations Centre (SOC).
• Management, administration & maintenance of securitydevices.
• Perform threat management, threat modelling, identifythreat vectors and develop use cases for security monitoring.
• Perform proficient threat analysis determination.
• Responsible for integration of standard and non-standardlogs in SIEM.
• Creation of reports, dashboards, metrics for presentationto stakeholders covering all security operations domains.
• Ensure that IT audits are effectively managed andcoordinated across all auditors and key stakeholders.
• Partner, build and maintain positive workingrelationships with stakeholders.
• Plays a lead role on Project Savvy.
• Defines and releases security awareness as requiredacross the Group.
• Protecting the cloud environment and ensuring thatconfigurations are set up.

Requirements

• Matric and a Tertiary degree
• 10-15 years' experience in leading cyber securityoperations
• Proficient in Incident Management and Response
• Experience in security device management and SIEM
• Experience in threat management
• Knowledge of various operating systems, including but notlimited to Windows, Linux, Mac OS.
• Excellent stakeholder management, communication, andleadership skills.
• Ability to manage multiple priorities and drive alignmentacross diverse teams
• Technical capability - Proficient in cyber securitycontrols, assessments and third-party management.
• People management – Ability to manage effectively performance and guide the team.
• Integrity and Ethics - Display high levels of integrityand trust as well as exercise professional judgment objectively andindependently.
• Communication – Ability to demonstrate excellentcommunication skills - both oral and written.
• Innovation – Ability to pursue innovative actively solutions to the cyber security team and business. Provide input thefuture strategic direction of cyber security.