Cybersecurity Analyst

Cvglobal; Cape Town; Presencial; ZAR 420.000 - 700.000; Jornada completa

Descripción de la vacante

CV, a global Christian organisation, seeks a Cybersecurity Analyst to help shape a mature security capability across governance, threat defence and AI governance. You’ll join a small team in Cape Town, focusing on hands-on security operations, incident response and vulnerability management.

Operate SIEM/EDR, prototype controls for secure AI experimentation, and collaborate with global teams to advance security practices in a mission-driven environment.

Formación

• Hands-on experience with security operations, SIEM, EDR and incident workflows.
• Familiarity with governance frameworks such as ISO 27001 or NIST.
• Ability to design practical controls for AI-enabled environments.

Responsabilidades

• Investigate alerts and incidents; tune SIEM/EDR and improve detections.
• Manage end-to-end vulnerability management and remediation coordination.
• Contribute to ISMS and AI management framework alignment and governance.
• Shape AI-security capabilities including guardrails, DLP, data egress visibility.

Conocimientos

SIEM

EDR

Threat hunting

Incident response

Educación

Degree in IT or Security

Herramientas

Cloud security

Descripción del empleo

Most cybersecurity roles give you an environment to protect. This one gives you an environment to help shape.

CV is a global Christian organisation using technology to pursue an ambitious mission: reaching people with the Gospel at a depth and scale that traditional approaches alone cannot achieve. Our five-year plan calls us to explore new frontiers, harness emerging technology and change what's possible.

AI is a significant part of that. We’re leaning into it - carefully, deliberately and with the security architecture underneath it to make experimentation safe. That creates a pretty interesting cybersecurity problem.

That’s where you come in.

This is not a 'watch the dashboard all day' job.

You’ll join a small Cybersecurity team as we move from establishing the foundations to operating a mature security capability. There is real security operations work - incidents, detection engineering, vulnerability management, SIEM, EDR and hardening - but there is also a much bigger picture.

• Design security patterns for an organisation where AI agents increasingly act on behalf of people.
• Prototype controls that let teams experiment quickly without losing control of data, identity and access.
• Combine DLP, model gateways, identity, telemetry and secure-by-design thinking into approaches teams can actually use.
• Build and champion ways AI can make a small security team dramatically better at detection, investigation and response.

Cybersecurity owns CV’s information-security posture across governance, assurance, threat defence, risk and incident response, while partnering with the teams that build and operate our technology. We want someone excited by that breadth.

What you’ll actually be doing.

• Investigate alerts and incidents; operate and tune SIEM, EDR, logging and security tooling; improve detections and help mature threat hunting and response.
• Run vulnerability management end-to-end, prioritising what matters and driving remediation with Infrastructure, Support and system owners.
• Help operate our ISMS and AI management framework, contributing to ISO 27001 and ISO 42001-aligned governance, assurance and continual improvement.
• Shape our AI-security capability: guardrails, DLP and data-egress visibility, secure-by-design review, AI tool discovery, agent security and emerging controls.
• Actively use AI, agents and automation to improve Cybersecurity itself - prototype ideas, prove what works, champion the good ones and bring them into operation.

In short: operate the security capability we have, improve it, and help invent the one we’re going to need next.

We’re looking for someone who builds - and brings people on the journey with them.

You probably have around 3-5 years of cybersecurity experience and enough grounding in security operations that SIEM, EDR, vulnerability scanners, cloud security and incident workflows are familiar territory. But experience alone isn’t the interesting bit.

Build it. Prove it. Bring people on the journey.

You see a problem and start building a better way to solve it. You prototype, experiment and turn rough ideas into something people can use. You’ve probably played with agents, APIs, automation, coding assistants or model tooling beyond what your job required - and when something works, you want to get it in front of people and into use.

You don’t just have ideas. You create momentum around them.

You explain why an idea matters, get the right people excited, absorb feedback without sanding off the ambition, and turn experiments into things the wider team adopts.

• Technically curious, inventive and self-starting; comfortable owning operational work while creating better ways to do it.
• Comfortable moving between an incident, an architecture conversation and an AI experiment.
• Collaborative and persuasive: you work with people, not around them, and translate technical threats into clear risks and actions.
• Professionally grounded: relevant degree, hands-on security tooling, familiarity with frameworks such as ISO 27001/NIST, and practical server/endpoint/cloud security experience.

A small team. A global canvas.

You’ll work alongside another Cybersecurity Analyst in Australia and report to the Head of Infrastructure & Cybersecurity. In Cape Town, you’ll sit alongside an established Infrastructure team under the same Head, with close relationships into Support, Applications, Data & Insight, Engineering and other technology teams around the world.

We’re at an inflection point: SIEM, vulnerability management, endpoint baselines, the ISMS and the first AI-governance framework are being established now. The next stage is mature active defence, proactive assurance and technical AI-security controls. There is enough structure to build on - and enough still undefined that your fingerprints can be all over what comes next.

Cybersecurity here is an enabling function.

We turn risk into practical standards, patterns and tooling that help teams move safely rather than simply telling them ‘no’. If your favourite security control is the word NO, this probably won’t be much fun.

And yes - mission matters here.

CV exists to introduce people to Jesus and encourage them to become His true followers. Technology is increasingly how we enable global reach, language scale and new forms of digital ministry, and our five-year plan deliberately describes CV as pioneering: exploring new frontiers and using technology and partnership to unlock new possibilities in world evangelism.

So this isn’t simply a cybersecurity job inside a Christian organisation. Your work helps create the trusted technological foundation on which that mission can move. The role requires someone who is a practising Christian, aligned with CV’s Statement of Faith and actively involved in a local church or Christian community.

Sound like your kind of problem?

If you’re reading this thinking, ‘I have about fifteen ideas already,’ good. We’d like to hear them.