Information Security Lead - Penetration Testing

Placements24; Cape Town; Hybrid; ZAR 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Competitive salary

Performance bonuses

Equity options

Medical and dental insurance

Retirement plan

Training and conferences

Hybrid work arrangement

Job summary

Placements24 collaborates with a prominent technology firm in Cape Town to recruit an Information Security Lead overseeing Penetration Testing and Vulnerability Management. You will head a team of experts, shaping security strategy and mitigating risks across digital assets and cloud environments.

The ideal candidate brings 8+ years in information security, with 3+ years in a leadership role, strong offensive security experience, and relevant certifications such as OSCP/CEH/CISSP/GIAC.

Qualifications

• Bachelor’s degree in Cybersecurity, CS, IT or related field.
• 8+ years in information security, including 3+ years in leadership focusing on penetration testing.
• Certifications such as OSCP, CEH, CISSP, GIAC desirable.

Responsibilities

• Lead a team of penetration testers and vulnerability specialists.
• Develop and execute penetration tests across networks, apps, and cloud.
• Perform vulnerability assessments and risk analysis.
• Prioritize and remediate weaknesses via a robust vulnerability management program.
• Stay updated with threat intel and attack vectors.
• Provide remediation guidance to IT and development teams.
• Report findings to senior management.
• Mentor junior staff and foster continuous learning.
• Represent security in cross-functional projects.

Skills

Leadership

Offensive security

Communication

Analytical thinking

Cloud security

Web application security

Networking protocols

Education

Bachelor’s degree in Cybersecurity/CS/IT

Tools

Metasploit

Burp Suite

Nmap

Vulnerability management platforms

Job description

About the Role

Our client, a leading technology firm based in the vibrant city of Cape Town, Western Cape , is seeking an accomplished and strategic Information Security Lead to head their Penetration Testing and Vulnerability Management division. This pivotal role involves leading a team of security experts in identifying and mitigating security weaknesses across the organization's digital assets. The ideal candidate will possess extensive experience in offensive security, a deep understanding of attacker methodologies, and strong leadership capabilities. This is an exciting opportunity to shape the security strategy and protect the critical infrastructure of a prominent company in Cape Town .

Key Responsibilities

Lead and manage a team of penetration testers and vulnerability assessment specialists. Develop and execute comprehensive penetration testing plans, covering network, application, and cloud environments. Conduct in-depth vulnerability assessments and risk analysis to identify potential security threats. Design and implement robust vulnerability management programs to prioritize and remediate identified weaknesses. Stay current with the latest threat intelligence, attack vectors, and security vulnerabilities. Develop and maintain security testing methodologies, tools, and processes. Collaborate with IT and development teams to provide actionable remediation guidance. Prepare detailed reports on testing findings, risks, and recommendations for senior management. Represent the security team in cross-functional projects and initiatives. Mentor and develop junior members of the security team, fostering a culture of continuous learning and improvement.

Requirements

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field. Minimum of 8 years of progressive experience in information security, with at least 3 years in a leadership or team management role focusing on penetration testing. Demonstrated expertise in offensive security techniques, tools (e.g., Metasploit, Burp Suite, Nmap), and methodologies. Strong understanding of networking protocols, web application security, operating systems, and cloud security principles. Experience with vulnerability management platforms and processes. Excellent analytical, problem-solving, and critical thinking skills. Outstanding communication and presentation abilities, with the capacity to explain complex technical issues to non-technical audiences. Relevant certifications such as OSCP, CEH, CISSP, or GIAC are highly desirable. Experience working within the Cape Town technology ecosystem is an advantage. Ability to manage multiple projects simultaneously and meet strict deadlines.

Benefits

Our client offers a highly competitive salary package, including performance-based bonuses and potential equity options. Employees benefit from comprehensive medical and dental insurance, a generous retirement savings plan, and significant paid time off. Opportunities for advanced training, professional certifications, and attendance at leading cybersecurity conferences are provided. The company culture is dynamic and forward-thinking, encouraging innovation and collaboration. This role offers a significant career advancement opportunity within a leading firm in Western Cape , with a flexible Hybrid work arrangement.