Information Security Manager

ATS Client; Midrand; On-site; ZAR 900,000 - 1,500,000; Full time

Job summary

ATS Client is seeking an Information Security Manager to lead enterprise cybersecurity strategy and governance, aligning with business objectives and regulatory requirements across all units. You will design secure hybrid environments (on‑premises + Azure), manage identity and access (Azure AD, MFA), oversee 24/7 SOC operations, integrate SIEM/SOAR, and guide risk and compliance programs.

The role requires a Bachelor's degree, 8+ years in IT security with leadership, and certifications such as

Qualifications

• Bachelor's degree in a related field.
• 8+ years in IT security with leadership experience.
• Certifications CISSP, CISM, or equivalent.
• Microsoft Certified: Cybersecurity Architect Expert.
• GIAC Security Operations (GSOM) or equivalent SOC certification.
• Familiarity with scripting (PowerShell, Bash) and automation.

Responsibilities

• Provide strategic leadership and governance for enterprise cybersecurity.
• Design secure hybrid environments (on-premises + Azure) and integrate security into projects.
• Manage identity and access controls (Azure AD, MFA, PAM).
• Oversee 24/7 SOC operations, incident response, and threat intelligence.
• Administer Microsoft 365 security features and security tooling (SIEM/SOAR).
• Lead security technology lifecycle management and patch management.
• Drive risk management, compliance programs, and audits.

Skills

Leadership

Governance

Strategic planning

Cyber security

Communication

Scripting

Education

Bachelor's degree in Computer Science, Information Technology, or related field

CISSP

CISM

Microsoft Certified: Cybersecurity Architect Expert

GIAC Security Operations (GSOM)

Tools

Azure AD

MFA

PAM

Microsoft Defender for Endpoint

Sentinel

Purview

Job description

About the job Information Security Manager

Information Security Manager

Responsibilities

Strategic Leadership & Governance

• Develop and maintain The Companys enterprise-wide cybersecurity strategy aligned with business objectives and regulatory requirements.
• Establish and enforce security governance frameworks, policies, and standards.
• Ensure alignment with the NIST Cybersecurity Framework (Identify, Protect, Detect, Respond, Recover) and Joint Security Standards.
• Lead the implementation of relevant security compliance initiatives.
• Collaborate with divisional CIOs and executive leadership to align security posture across business units.
• Monitor emerging threats, regulatory changes, and industry trends to inform strategic decisions.

Architecture & Identity Management

• Design secure solutions for hybrid environments (on-premises + Azure).
• Integrate security into infrastructure and application projects.
• Manage identity and access controls, including Azure AD, MFA, and privileged access management.

Security Operations

• Manage day-to-day security monitoring, incident handling, and threat intelligence.
• Administer Microsoft 365 security features: Defender for Endpoint, Purview, Sentinel, Conditional Access, etc.
• Ensure endpoint, network, and cloud security controls are effectively implemented and monitored.
• Implement and enforce BYOD policies, including MDM, DLP, and secure access controls.
• Secure branch office networks, including firewalls, VPNs, segmentation, and remote access protocols.

Financial Management

• Develop and manage the annual cybersecurity budget, including licensing, tools, training, and consulting services.
• Track and report on security-related expenditures, ROI, and risk mitigation outcomes.
• Support procurement and vendor management for security solutions.

Cyber Security Operations Center (SOC) Oversight

• Oversee 24/7 SOC operations to ensure effective threat detection, incident response, and escalation.
• Define SOC roles, workflows, and incident response playbooks.
• Integrate SIEM, SOAR, and threat intelligence platforms for proactive defense.
• Monitor and improve KPIs such as MTTD (Mean Time to Detect) and MTTR (Mean Time to Respond).
• Coordinate with external threat intelligence providers and law enforcement when necessary.

Security Technology Lifecycle Management

• Oversee the deployment, maintenance, and upgrade of security technologies including Microsoft 365 E3/E5 and Hailstone platforms.
• Ensure timely patching, configuration updates, and feature adoption.
• Maintain compatibility and integration of security tools with The Companys hybrid infrastructure.
• Document system configurations and update operational procedures regularly.

Risk Management & Compliance

• Conduct regular risk assessments, vulnerability scans, and penetration tests.
• Ensure compliance with POPIA, GDPR, NIST CSF, JSS, and other relevant regulations and frameworks.
• Maintain a risk register and track mitigation actions.
• Coordinate internal and external audits and ensure timely remediation of findings.

Awareness, Education & Training

• Lead organization-wide cybersecurity awareness programs.
• Deliver targeted training for IT, business, and executive teams.
• Promote secure behavior and incident reporting culture.

Team Leadership & Culture

• Build and lead a high-performing cybersecurity team including SOC analysts, engineers, and compliance specialists.
• Define clear roles, responsibilities, and performance expectations.
• Conduct regular coaching, performance reviews, and career development planning.
• Foster a culture of accountability, innovation, and continuous improvement.
• Promote cybersecurity awareness and ownership across all departments.

Reporting

• Prepare operational and executive-level reports on security posture, risk exposure, and compliance status.

Minimum Requirements

• Bachelors degree in Computer Science, Information Technology, or related field.
• 8+ years of IT Security experience, with at least 5 years in a leadership role.
• Industry-recognized certifications: CISSP, CISM, or equivalent.
• Microsoft Certified: Cybersecurity Architect Expert.
• GIAC Security Operations (GSOM) or equivalent SOC certification.
• Familiarity with scripting (PowerShell, Bash) and automation tools.