It Security Officer – Cloud & Infrastructure (Remote)

Datafin It Recruitment; Remote; ZAR 400 000 - 500 000; Full time

Job summary

A leading IT recruitment firm in Cape Town is looking for an IT Security Officer for Cloud Infrastructure. The role involves defining and maintaining security postures in AWS and Azure environments. Ideal candidates will have at least 5 years of IT security experience, with strong knowledge in cloud security tools and frameworks. This position promotes a proactive approach to security while ensuring compliance and operational efficiency. Certifications like CISSP or AWS Certified Security – Specialty are preferred.

Qualifications

• 5+ years in IT Security roles with cloud focus (AWS, Azure, Microsoft).
• Deep knowledge of AWS Security Tools and Azure Security Tools.
• Preferred certifications include CISSP, CCSP, or CISM.

Responsibilities

• Maintain secure configurations across AWS and Azure.
• Conduct regular vulnerability scans and configuration reviews.
• Lead detection, response, and recovery activities for incidents.

Skills

Cloud Security Management

Risk Management

Incident Response

Communication Skills

Education

Bachelor's Degree in Computer Science, Information Technology, or Cybersecurity

Tools

AWS GuardDuty

Azure Defender

Microsoft Defender Suite

Security Hub

IAM

Job description

Job Overview

ENVIRONMENT: Define, implement and maintain the security posture across AWS, Microsoft Azure, and Microsoft environments of a fast‑paced eCommerce platform. This role ensures the confidentiality, integrity, and availability of cloud systems and corporate data supporting the company's global retail and eCommerce operations. The successful candidate will balance hands‑on cloud security expertise with strong governance, risk management, and reporting capabilities – ensuring security enables business growth while maintaining compliance and resilience.

Responsibilities

• Cloud Security Management (AWS & Azure): Maintain secure configurations across AWS and Azure environments. Manage IAM, RBAC, encryption, and network security for cloud resources. Optimize cloud-native security tools (e.g., AWS GuardDuty, Security Hub, Azure Defender, Sentinel).
• Conduct regular vulnerability scans, posture assessments, and configuration reviews.
• Support Data Engineering teams in implementing secure CI/CD pipelines and IaC security standards.
• Microsoft Security & Compliance: Administer Microsoft security configurations, Defender for Office, and DLP policies. Enforce MFA, Conditional Access, and Zero Trust principles across all users and devices. Manage identity governance via Entra ID (Azure AD) and integration with other SaaS systems. Monitor alerts from the Microsoft Security & Compliance Center and remediate as needed.
• Governance, Risk, and Compliance (GRC): Maintain and enhance IT security policies and standards aligned with ISO *****, NIST CSF, and CIS Benchmarks. Perform security risk assessments, vendor due diligence, and internal compliance reviews. Support regulatory compliance (GDPR, POPIA, CCPA, etc.) and internal/external audits. Develop and maintain security documentation, including asset inventories, data flow maps, and risk registers.
• Incident Response and Threat Management: Lead detection, response, and recovery activities for cloud and Microsoft incidents. Coordinate with internal teams and external MSSPs for threat investigation and remediation. Maintain and test incident response playbooks and escalation workflows. Report and document incidents with root cause analysis and recommended mitigations.
• Identity, Access, and Endpoint Security: Oversee centralized identity management through Azure AD / Entra ID integrated with AWS IAM and SSO. Enforce least privilege access, role-based permissions, and secure authentication methods. Ensure endpoint compliance through Defender for Endpoint or equivalent solutions. Monitor device posture and remediate policy violations proactively.
• Security Awareness and Collaboration: Conduct Cybersecurity awareness training and phishing simulations across the business. Partner with IT operations, Data Engineering, and Enterprise Systems teams to embed "security by design." Collaborate with business leaders to align security strategy with operational goals.

Requirements

• Qualifications: Bachelor's Degree in Computer Science, Information Technology, or Cybersecurity (or equivalent experience).
• Preferred Certifications: CISSP, CCSP, or CISM; AWS Certified Security – Specialty; Microsoft Certified: Cybersecurity Architect Expert or Azure Security Engineer Associate; pTIA Security+ or CEH.
• Experience/Skills: 5+ years in IT Security roles with cloud focus (AWS, Azure, and Microsoft). Deep knowledge of AWS Security Tools (GuardDuty, Security Hub, CloudTrail, WAF, KMS). Strong knowledge of Azure Security Tools (Defender, Sentinel, Policy, Blueprints). Proficiency with Microsoft Security: Defender Suite, DLP, Intune, Entra ID. Understanding of Network & Endpoint Protection, SIEM, Vulnerability Management. Familiarity with SSO, SAML, OAuth, and Zero Trust frameworks. Knowledge of ISO *****, NIST, SOC 2, and GDPR compliance frameworks.

Attributes

• Analytical, detail-oriented, and proactive in identifying risks.
• Able to communicate complex security issues to non-technical stakeholders.
• Balances governance with operational pragmatism.
• Strong collaboration and leadership capabilities.

While we would really like to respond to every application, if you are not contacted for this position within 10 working days please consider your application unsuccessful.

It Security Officer Cloud Infrastructure Remote • Cape Town, Western Cape