Group Information Security Consultant

Part of nGAGE Talent Limited; Cape Town; Hybrid; ZAR 900,000 - 1,200,000; Full time

Benefits offered by this job

Flexible hybrid working

Annual bonus

International exposure

Job summary

Smart4Energy is recruiting an Information Security Consultant to join its group information security team. The role combines practical IT security with governance, risk and compliance, and works with the Head of Information Security and IT teams to maintain controls across the group.

Based in Cape Town or Johannesburg with a flexible hybrid arrangement, you will help strengthen security, support audits, and report risks and performance metrics to international stakeholders and technology

Qualifications

• Relevant tertiary qualification or equivalent practical experience.
• Ideally five years' relevant information security experience. Strong transferable experience considered.
• Hands-on experience across enterprise security controls, including firewalls, endpoint protection, vulnerability management and patching.
• Working knowledge of security monitoring or SIEM tools and incident management.
• Understanding of information security governance, risk, policies and compliance.
• Strong analytical, documentation and stakeholder communication skills.
• Willingness to provide occasional support outside normal working hours for incidents or projects.

Responsibilities

• Maintain and improve information security policies, standards, procedures and controls.
• Support firewall administration, change management and security logging.
• Help maintain endpoint protection, vulnerability management, security monitoring and patching processes.
• Investigate security-related incidents and coordinate remediation with IT teams.
• Conduct internal compliance checks and support audit readiness and evidence gathering.
• Support information security management, payment-card security and data-protection requirements.
• Assess applications and technology changes against security requirements.
• Report on security risks, controls and performance metrics.
• Contribute to business continuity and disaster recovery planning.
• Work with international stakeholders, local IT teams and technology vendors.

Skills

Enterprise security controls

SIEM tools

Incident management

Governance & compliance

Stakeholder communication

After-hours support

Education

Tertiary qualification or equivalent

Tools

Fortinet firewalls

Palo Alto firewalls

Cortex XDR

Rapid7

Job description

Group Information Security Consultant | GRC & Security Operations

Cape Town or Johannesburg | Permanent | Flexible hybrid working

Smart4Energy is recruiting an Information Security Consultant for an international services organisation with operations across multiple countries.

This opportunity combines practical IT security with governance, risk and compliance. Working closely with the Head of Information Security and operational IT teams, you will help maintain effective security controls, strengthen compliance and support secure, reliable services across the group.

Your responsibilities

• Maintain and improve information security policies, standards, procedures and controls.
• Support firewall administration, change management and security logging.
• Help maintain endpoint protection, vulnerability management, security monitoring and patching processes.
• Investigate security-related incidents and coordinate remediation with IT teams.
• Conduct internal compliance checks and support audit readiness and evidence gathering.
• Support information security management, payment-card security and data-protection requirements.
• Assess applications and technology changes against security requirements.
• Report on security risks, controls and performance metrics.
• Contribute to business continuity and disaster recovery planning.
• Work with international stakeholders, local IT teams and technology vendors.

What we're looking for

• Relevant tertiary qualification or equivalent practical experience.
• Ideally five years' relevant information security experience. Candidates with strong transferable experience will also be considered.
• Hands-on experience across enterprise security controls, including firewalls, endpoint protection, vulnerability management and patching.
• Working knowledge of security monitoring or SIEM tools and incident management.
• Understanding of information security governance, risk, policies and compliance.
• Strong analytical, documentation and stakeholder communication skills.
• Willingness to provide occasional support outside normal working hours for incidents or projects.

Useful additional experience

• Fortinet or Palo Alto firewalls.
• Cortex XDR, Rapid7 or equivalent enterprise security tools.
• PCI DSS, GDPR, ISO-aligned information security management or IT auditing.
• CISM, CISA, CCNA, CCNP or other relevant security/networking certifications.
• ITIL, network-analysis tools or international business exposure.

You do not need experience with every product listed. Practical security capability and the ability to apply sound controls are more important than an exact technology match.

What's on offer

• A permanent group-level role with international exposure.
• Flexible hybrid working for candidates based in Cape Town or Johannesburg; attendance arrangements will be discussed during the process.
• A fixed cost-to-company package with flexibility in benefit allocation, subject to company policy.
• A discretionary annual bonus.