Group Cyber Security Leader: Strategy & Incident Response

Clicks Group; Wes-Kaap; On-site; ZAR 1,200,000 - 2,000,000; Full time

Job summary

Clicks Group is seeking a Cyber Security Manager to lead the cyber programme across its multi-brand group. The role combines leadership with deep technical expertise to set direction, lead security teams, and challenge technology and business owners on material risks.

You will translate business priorities into security priorities, align controls with risk appetite, and provide executive management with a clear, evidence-based view of material cyber risk and resilience across the organisation.

Qualifications

• At least 7 years in IT security with 5 years in hands-on cyber security and 3 years in managing teams.
• Experience translating technical risk to executive audiences.
• Knowledge of NIST CSF, ISO/IEC 27001/27002, PCI DSS.
• Experience managing budgets and security vendors.

Responsibilities

• Develop the cyber security strategy and multi-year roadmap aligned to business priorities.
• Provide executive management with clear view of material cyber risks and remediation priorities.
• Lead incident response with playbooks, evidence preservation and regulatory notifications.
• Oversee vulnerability management, risk assessments and penetration testing.
• Embed security controls into IT projects and drive secure development.
• Lead audits and PCI DSS compliance efforts across the group.

Skills

Leadership

Strategy development

Executive reporting

Risk management

Vendor management

Security governance

Incident response

Education

Degree or Diploma in IT/Systems/Computer

Tools

EDR/XDR

SIEM/MDR

Identity & Access Management

Entra ID / Active Directory

Microsoft 365 security

Zero Trust / FW & VPN

Job description

Clicks Group is seeking a Cyber Security Manager to lead the cyber programme across its multi-brand group. The role combines leadership with deep technical expertise to set direction, lead security teams, and challenge technology and business owners on material risks.

You will translate business priorities into security priorities, align controls with risk appetite, and provide executive management with a clear, evidence-based view of material cyber risk and resilience across the organisation.