Financial Sector Cybersecurity Consultant

South African Reserve Bank; Gauteng; On-site; ZAR 1,200,000 - 1,800,000; Full time

Job summary

The South African Reserve Bank seeks a Financial Sector Cybersecurity Consultant to enhance resilience by coordinating national, regional, and international central banking cybersecurity efforts.

You will lead collaboration forums, oversee awareness initiatives, and align SARB departments to strengthen cyber defence, incident response, and governance; the role requires advanced qualifications and 8–10 years in cybersecurity management.

Qualifications

• Honours degree in cybersecurity or related field required.
• Advanced security certifications (CISSP, CISM, CEH) required.
• 8–10 years of cybersecurity management experience, preferably in financial sector.

Responsibilities

• Lead national, regional and international collaboration to strengthen cyber resilience.
• Coordinate and administer Operational Security Situational Awareness with 50 central banks.
• Drive participation in regional and international cyber resilience structures.
• Align cybersecurity initiatives across SARB groups for cohesive efforts.
• Position SARB as a leader in information-sharing and cyber resilience.
• Develop and maintain SARB Cyber Resilience Framework.
• Ensure compliance with Cybersecurity Responsible Disclosure Policy.
• Engage state agencies in incident response within National Incident Management Centre.

Skills

Cybersecurity governance

Incident management

Risk management

Business continuity

Communication skills

Relationship building

Decision making

Negotiation

Complexity management

Legislation knowledge

Education

Honours degree (NQF 8) in Cybersecurity/Information Security/Information Technology

Advanced security certifications (CISSP/CISM/CEH)

Job description

Job no.: 1683

Job title: Financial Sector Cybersecurity Consultant

Location: Head Office, Pretoria

Organisation name: Cyber and Information Security Unit

Department description: Business Solutions and Technology Department

Brief description

The primary objective of this role is to enhance cybersecurity resilience through proactive collaboration, effective coordination, timely early warning mechanisms, and comprehensive situational awareness across national, regional (Southern African Development Community) and international central banking communities. This will be achieved by establishing, facilitating and actively engaging in various cybersecurity structures and forums –including internal, inter-organisational, national, regional and international platforms – to foster collective cyber defence and enable swift and appropriate responses to cybersecurity incidents.

Detailed description

The successful candidate will be responsible for the following key performance areas:

• Facilitate national, regional and international financial (central banking) industry collaboration to strengthen cybersecurity resilience by advocating and supporting relevant legislative frameworks, establishing appropriate cybersecurity structures and actively participating in national forums as mandated under the Financial Sector Regulation Act 9 of 2017 and the National Cybersecurity Policy Framework (e.g. the Financial Sector Contingency Forum, Financial Sector Cyber Resilience Subcommittee, cybersecurity incident response teams, Cybersecurity Response Committee and National Consumer Commission).
• Drive, manage and administer the Operational Security Situational Awareness initiative involving collaboration with 50 central banks. Responsibilities include coordinating fortnightly virtual meetings and handling all administrative tasks, such as agenda preparation, minutes and managing presentations and discussions. Additionally, oversee the planning and coordination of an annual in-person conference, including logistical arrangements, agenda development, issuing invitations, managing guest speakers and coordinating presentations.
• Drive regional and international collaboration on cybersecurity and cyber resilience by leading and contributing to existing and new structures (e.g. the Cyber Working Group under the Committee of Central Bank Governors in the Southern African Development Community, BRICS Rapid Information Security Channel, International Monetary Fund Cyber Resilience Centre, and cyber working groups under the Bank for International Settlements).
• Coordinate and align cybersecurity-related initiatives across key areas within the South African Reserve Bank (SARB) – including the Prudential Authority, Financial Stability Department, Business Solutions and Technology Department and National Payment System Department – to ensure cohesive participation and support for sectoral, national, regional and international cybersecurity efforts.
• Position the SARB Group as a leader in financial sector collaboration and information-sharing to promote cyber resilience.
• Develop, maintain and update the SARB Group Cyber Resilience Framework in line with collaboration efforts.
• Develop, oversee the implementation of and ensure compliance with the SARB Group's Cybersecurity Responsible Disclosure Policy.
• Ensure the SARB Group drives and capacitates national and regional sector cybersecurity incident response teams and supports international response efforts.
• Ensure appropriate state agency (State Security Agency, South African Police Service and National Cybersecurity Hub) involvement when dealing with incidents as part of the National Incident Management Centre structure.

Job requirements

To be considered for this position, candidates must be in possession of:

• at least an Honours degree (NQF 8) in Cybersecurity, Information Security, Information Technology or an equivalent qualification;
• advanced security certifications that are not product-, security area- or technology-specific (e.g. Certified Information Systems Security Professional, Certified Information Security Manager or Certified Ethical Hacker); and
• at least eight to 10 years’ experience in cybersecurity management, preferably in the financial sector.

Additional requirements include:

• knowledge and skill in:
• cybersecurity governance;
• cybersecurity incident and threat management;
• risk management;
• emergency/contingency management;
• general management;
• business continuity management;
• effective communication skills;
• conceptual thinking skills;
• the ability to plan and give advice;
• the ability to build and maintain relationships;
• impact and influence;
• a drive for results;
• negotiation skills;
• the ability to manage complexity and ambiguity;
• judgement and decision‑making skills;
• interpersonal sensitivity;
• knowledge of the relevant legislation; and
• advanced computer literacy skills.

This position will be advertised internally and externally.

In line with the SARB’s commitment to diversifying its workforce, preference will be given to suitable candidates from designated groups. People with disabilities are welcome to apply.

The SARB offers remuneration and benefits commensurate with the level of the position and in line with the market. The level at which the successful applicant will be appointed will depend on his/her competence and experience.

Human Resources Department