Cybersecurity Incident Response Manager

Placements24; Pretoria; Hybrid; ZAR 1,400,000 - 2,000,000; Full time

Benefits offered by this job

Hybrid work model

Health insurance

Retirement plan

Training & certifications

Equipment provided

Wellness programs

Job summary

Placements24 seeks a seasoned Cybersecurity Incident Response Manager to lead the incident response team in Pretoria, Gauteng. You will refine playbooks and coordinate with internal stakeholders and external agencies during critical events.

You will guide detection, analysis, containment, and recovery efforts across the enterprise, applying attacker TTP knowledge while communicating effectively with leadership and partners. A strategic role to safeguard assets and the company’s reputation.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related discipline; Master's degree preferred.
• Minimum of 8 years of progressive experience in information security, with at least 5 years in incident response or management.
• Proven experience leading incident response teams through complex security events.
• Deep understanding of cybersecurity principles, networks, operating systems, and common attack vectors.
• Hands-on experience with incident response tools and techniques, including digital forensics and malware analysis.
• Experience developing and executing incident response playbooks and procedures.
• Strong leadership, communication, and interpersonal skills, with the ability to stay calm under pressure.
• Knowledge of legal and regulatory requirements related to cybersecurity incidents.
• Certifications such as CISSP, GCIH, GCFA, or CCISO are desirable.
• Ability to work flexible hours and be on-call during significant security events.

Responsibilities

• Develop, implement, and maintain incident response plans and procedures.
• Lead and manage the incident response team with guidance and mentorship.
• Oversee detection, analysis, and containment of incidents across the enterprise.
• Coordinate incident response activities with internal teams and external parties.
• Conduct post-incident reviews to identify lessons and improvements.
• Develop and deliver training programs for incident response members and stakeholders.
• Manage relationships with third-party incident responders and law enforcement.
• Stay current with threat intelligence, attacker TTPs, and response techniques.
• Ensure compliance with legal and regulatory requirements for incident reporting and data breach notification.
• Manage tools and technologies used by the team (EDR, SIEM, forensics).

Skills

Incident response leadership

Team leadership

Cybersecurity fundamentals

Communication skills

On-call availability

Education

Bachelor's degree in Cybersecurity or related

Master's degree preferred

Tools

EDR

SIEM

Digital forensics

Job description

About the Role

Our client, a prominent multinational corporation with significant operations in Pretoria, Gauteng , is seeking a seasoned Cybersecurity Incident Response Manager. This leadership role is responsible for overseeing the organization's incident response program, ensuring timely and effective containment, eradication, and recovery from cybersecurity incidents. You will lead a team of highly skilled incident responders, develop and refine response playbooks, and coordinate with internal stakeholders and external agencies during critical events. The ideal candidate possesses extensive experience in managing complex security incidents, a deep understanding of attacker methodologies, and exceptional leadership qualities. This is a strategic position that plays a vital role in safeguarding the company's digital assets and reputation.

Key Responsibilities

• Develop, implement, and maintain the organization's cybersecurity incident response plan and procedures.
• Lead and manage the cybersecurity incident response team, providing guidance and mentorship.
• Oversee the detection, analysis, and containment of security incidents across the enterprise.
• Coordinate incident response activities, ensuring effective communication and collaboration among internal teams and external parties.
• Conduct post-incident reviews to identify lessons learned and implement improvements to the response process.
• Develop and deliver training programs for incident response team members and relevant stakeholders.
• Manage relationships with third-party incident response providers and law enforcement agencies.
• Stay current with the latest threat intelligence, attacker TTPs, and incident response techniques.
• Ensure compliance with legal and regulatory requirements related to incident reporting and data breach notification.
• Manage the tools and technologies utilized by the incident response team, including EDR, SIEM, and forensics platforms.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related discipline; Master's degree preferred.
• Minimum of 8 years of progressive experience in information security, with at least 5 years in a dedicated incident response or management role.
• Proven experience managing and leading incident response teams through complex security events.
• Deep understanding of cybersecurity principles, network protocols, operating systems, and common attack vectors.
• Hands-on experience with incident response tools and techniques, including digital forensics and malware analysis.
• Experience developing and executing incident response playbooks and procedures.
• Excellent leadership, communication, and interpersonal skills, with the ability to remain calm under pressure.
• Strong understanding of legal and regulatory requirements related to cybersecurity incidents.
• Relevant certifications such as CISSP, GCIH, GCFA, or CCISO are highly desirable.
• Ability to work flexible hours and be on-call as required during significant security events.

Benefits

• Exceptional salary package with performance-based incentives.
• Comprehensive health, dental, and vision insurance plans.
• Generous retirement savings plan with company matching.
• Significant opportunities for professional development, training, and certifications.
• Hybrid work model allowing for flexibility within Pretoria, Gauteng . Access to cutting-edge cybersecurity technologies and resources.
• Collaborative and supportive work environment focused on innovation.
• Regular team-building events and professional networking opportunities.
• Company-provided equipment and resources.
• Employee wellness programs and discounted gym memberships.