Cybersecurity Incident Response Lead — Hybrid (Pretoria)

Placements24; Pretoria; Híbrido; ZAR 1.400.000 - 2.000.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid work model

Health insurance

Retirement plan

Training & certifications

Equipment provided

Wellness programs

Descripción de la vacante

Placements24 seeks a seasoned Cybersecurity Incident Response Manager to lead the incident response team in Pretoria, Gauteng. You will refine playbooks and coordinate with internal stakeholders and external agencies during critical events.

You will guide detection, analysis, containment, and recovery efforts across the enterprise, applying attacker TTP knowledge while communicating effectively with leadership and partners. A strategic role to safeguard assets and the company’s reputation.

Formación

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related discipline; Master's degree preferred.
• Minimum of 8 years of progressive experience in information security, with at least 5 years in incident response or management.
• Proven experience leading incident response teams through complex security events.
• Deep understanding of cybersecurity principles, networks, operating systems, and common attack vectors.
• Hands-on experience with incident response tools and techniques, including digital forensics and malware analysis.
• Experience developing and executing incident response playbooks and procedures.
• Strong leadership, communication, and interpersonal skills, with the ability to stay calm under pressure.
• Knowledge of legal and regulatory requirements related to cybersecurity incidents.
• Certifications such as CISSP, GCIH, GCFA, or CCISO are desirable.
• Ability to work flexible hours and be on-call during significant security events.

Responsabilidades

• Develop, implement, and maintain incident response plans and procedures.
• Lead and manage the incident response team with guidance and mentorship.
• Oversee detection, analysis, and containment of incidents across the enterprise.
• Coordinate incident response activities with internal teams and external parties.
• Conduct post-incident reviews to identify lessons and improvements.
• Develop and deliver training programs for incident response members and stakeholders.
• Manage relationships with third-party incident responders and law enforcement.
• Stay current with threat intelligence, attacker TTPs, and response techniques.
• Ensure compliance with legal and regulatory requirements for incident reporting and data breach notification.
• Manage tools and technologies used by the team (EDR, SIEM, forensics).

Conocimientos

Incident response leadership

Team leadership

Cybersecurity fundamentals

Communication skills

On-call availability

Educación

Bachelor's degree in Cybersecurity or related

Master's degree preferred

Herramientas

EDR

SIEM

Digital forensics

Descripción del empleo

Placements24 seeks a seasoned Cybersecurity Incident Response Manager to lead the incident response team in Pretoria, Gauteng. You will refine playbooks and coordinate with internal stakeholders and external agencies during critical events.

You will guide detection, analysis, containment, and recovery efforts across the enterprise, applying attacker TTP knowledge while communicating effectively with leadership and partners. A strategic role to safeguard assets and the company’s reputation.