Cybersecurity Operations Manager

Placements24; Cape Town; Hybrid; ZAR 900,000 - 1,500,000; Full time

Benefits offered by this job

Medical aid

Provident fund

Performance bonuses

Certification funding

Flexible working arrangements

Job summary

Placements24 is seeking an experienced Cybersecurity Operations Manager to lead the Security Operations Center in Cape Town. This hybrid role requires on-site presence for critical sessions and incident response, with remote work flexibility for other duties.

You will manage a team of security analysts, oversee SIEM/EDR/SOAR tooling, and establish robust incident response playbooks while collaborating with IT and business units to ensure continuity and security across the organization.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field.
• Minimum of 7 years of experience in cybersecurity operations, with at least 3 years in a management or team lead role.
• Extensive experience with SIEM, SOAR, EDR, and other security monitoring and response technologies.
• Demonstrated experience in developing and implementing incident response plans and playbooks.
• Strong knowledge of network security, endpoint security, cloud security (AWS, Azure), and common attack frameworks.
• Excellent leadership, communication, and interpersonal skills.
• Ability to manage complex projects and drive cross-functional initiatives.
• Experience working in a hybrid work model, balancing remote and on-site responsibilities effectively.
• Relevant certifications such as CISSP, CISM, or GIAC certifications are highly advantageous.

Responsibilities

• Lead, mentor, and manage a team of cybersecurity analysts responsible for 24/7 monitoring and incident response.
• Oversee the operation and optimization of security tools, including SIEM, IDS/IPS, EDR, and threat intelligence platforms.
• Develop, implement, and enforce security operational procedures, policies, and guidelines.
• Manage and coordinate incident response activities, ensuring timely and effective resolution of security breaches.
• Conduct regular security assessments and penetration tests to identify and mitigate vulnerabilities.
• Collaborate with IT and business units to integrate security into system design and deployment lifecycles.
• Develop and deliver regular reports on security posture, incident trends, and operational effectiveness to senior management.
• Stay current with emerging threats, vulnerabilities, and cybersecurity technologies.
• Manage relationships with third-party security vendors and service providers.
• Contribute to the development and execution of the overall cybersecurity strategy.

Skills

Cybersecurity leadership

SOC management

Threat detection

Incident response

Team mentoring

Education

Bachelor's degree in Cybersecurity/related field

Master's degree preferred

Tools

SIEM

SOAR

EDR

Threat intel

Job description

About the Role

Our client is seeking an experienced and strategic Cybersecurity Operations Manager to lead their security operations center (SOC) in Cape Town, Western Cape. This role is pivotal in ensuring the continuous monitoring, detection, and response to cyber threats across the organization's infrastructure. You will manage a team of skilled security analysts, oversee the deployment and tuning of security tools, and develop robust operational procedures. The ideal candidate possesses strong leadership qualities, a deep understanding of security frameworks, and a proven track record in managing security operations. This hybrid role requires you to be present in the Cape Town office for specific collaborative sessions and critical on-site incident response, while offering flexibility for remote work for other duties. You will play a key role in shaping the future of our client's cybersecurity defenses and ensuring business continuity.

Key Responsibilities

• Lead, mentor, and manage a team of cybersecurity analysts responsible for 24/7 monitoring and incident response.
• Oversee the operation and optimization of security tools, including SIEM, IDS/IPS, EDR, and threat intelligence platforms.
• Develop, implement, and enforce security operational procedures, policies, and guidelines.
• Manage and coordinate incident response activities, ensuring timely and effective resolution of security breaches.
• Conduct regular security assessments and penetration tests to identify and mitigate vulnerabilities.
• Collaborate with IT and business units to integrate security into system design and deployment lifecycles.
• Develop and deliver regular reports on security posture, incident trends, and operational effectiveness to senior management.
• Stay current with emerging threats, vulnerabilities, and cybersecurity technologies.
• Manage relationships with third-party security vendors and service providers.
• Contribute to the development and execution of the overall cybersecurity strategy.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field; Master's degree preferred.
• Minimum of 7 years of experience in cybersecurity operations, with at least 3 years in a management or team lead role.
• Extensive experience with SIEM, SOAR, EDR, and other security monitoring and response technologies.
• Demonstrated experience in developing and implementing incident response plans and playbooks.
• Strong knowledge of network security, endpoint security, cloud security (AWS, Azure), and common attack frameworks.
• Excellent leadership, communication, and interpersonal skills.
• Ability to manage complex projects and drive cross-functional initiatives.
• Experience working in a hybrid work model, balancing remote and on-site responsibilities effectively.
• Relevant certifications such as CISSP, CISM, or GIAC certifications are highly advantageous.

Benefits

• This hybrid role in Cape Town offers a competitive salary, comprehensive medical aid, provident fund, and performance-based bonuses. Our client provides ample opportunities for professional development, including funding for certifications and conferences. Employees benefit from flexible working arrangements, access to advanced security training programs, and a collaborative work environment. You'll have access to state-of-the-art security tools and technologies, and the chance to work on challenging and impactful cybersecurity projects. A generous leave allowance and wellness programs are also part of the package.