Group Information Security Consultant

Smart4 Energy; Wes-Kaap; Hybrid; ZAR 700,000 - 1,200,000; Full time

Benefits offered by this job

Flexible hybrid working

Discretionary annual bonus

International exposure

Job summary

Smart4Energy is seeking a Group Information Security Consultant for GRC & Security Operations, based in Cape Town or Johannesburg with flexible hybrid working. You will partner with the Head of Information Security and IT teams to strengthen controls and compliance across the group.

Responsibilities include maintaining security policies, firewall/endpoint protection, vulnerability management, incident response, audits and business continuity planning, with strong stakeholder communication and

Qualifications

• Relevant tertiary qualification or equivalent practical experience.
• Ideally five years’ relevant information security experience; transferable experience considered.
• Hands-on experience with enterprise security controls: firewalls, endpoint protection and patching.
• Knowledge of security monitoring/SIEM and incident management.
• Understanding of governance, risk and compliance in information security.
• Strong analytical, documentation and stakeholder communication skills.
• Willing to provide occasional after-hours support for incidents or projects.

Responsibilities

• Maintain and improve information security policies, standards, procedures and controls.
• Support firewall administration, change management and security logging.
• Maintain endpoint protection, vulnerability management and patching processes.
• Investigate security incidents and coordinate remediation with IT teams.
• Conduct internal compliance checks and aid audits/evidence gathering.
• Support information security governance, PCI DSS, GDPR and data protection requirements.
• Assess applications and technology changes against security requirements.
• Report on security risks, controls and performance metrics.
• Contribute to business continuity and disaster recovery planning.
• Collaborate with international stakeholders, local IT teams and vendors.

Skills

InfoSec experience

SIEM tools

Incident management

Governance & compliance

Stakeholder communication

Security controls

Firewalls

Education

Bachelor's degree or equivalent in IT/Security

Tools

Fortinet

Palo Alto

Cortex XDR

Rapid7

Job description

Group Information Security Consultant | GRC & Security Operations

Cape Town or Johannesburg | Permanent | Flexible hybrid working

Smart4Energy is recruiting an Information Security Consultant for an international services organization with operations across multiple countries.

This opportunity combines practical IT security with governance, risk and compliance. Working closely with the Head of Information Security and operational IT teams, you will help maintain effective security controls, strengthen compliance and support secure, reliable services across the group.

Your responsibilities

• Maintain and improve information security policies, standards, procedures and controls.
• Support firewall administration, change management and security logging.
• Help maintain endpoint protection, vulnerability management, security monitoring and patching processes.
• Investigate security-related incidents and coordinate remediation with IT teams.
• Conduct internal compliance checks and support audit readiness and evidence gathering.
• Support information security management, payment-card security and data-protection requirements.
• Assess applications and technology changes against security requirements.
• Report on security risks, controls and performance metrics.
• Contribute to business continuity and disaster recovery planning.
• Work with international stakeholders, local IT teams and technology vendors.

What we’re looking for

• Relevant tertiary qualification or equivalent practical experience.
• Ideally five years’ relevant information security experience. Candidates with strong transferable experience will also be considered.
• Hands-on experience across enterprise security controls, including firewalls, endpoint protection, vulnerability management and patching.
• Working knowledge of security monitoring or SIEM tools and incident management.
• Understanding of information security governance, risk, policies and compliance.
• Strong analytical, documentation and stakeholder communication skills.
• Willingness to provide occasional support outside normal working hours for incidents or projects.

Useful additional experience

• Fortinet or Palo Alto firewalls.
• Cortex XDR, Rapid7 or equivalent enterprise security tools.
• PCI DSS, GDPR, ISO-aligned information security management or IT auditing.
• CISM, CISA, CCNA, CCNP or other relevant security/networking certifications.
• ITIL, network-analysis tools or international business exposure.

You do not need experience with every product listed. Practical security capability and the ability to apply sound controls are more important than an exact technology match.

What’s on offer

• A permanent group-level role with international exposure.
• Flexible hybrid working for candidates based in Cape Town or Johannesburg; attendance arrangements will be discussed during the process.
• A fixed cost-to-company package with flexibility in benefit allocation, subject to company policy.
• A discretionary annual bonus.