IT Security Specialist

Salt Digital Recruitment; Durban; On-site; ZAR 600,000 - 900,000; Full time

Job summary

Salt Digital Recruitment's client in the retail space seeks an IT Security Specialist to safeguard the IT landscape, build secure solutions, and strengthen cyber resilience. You will partner with architects and IT teams to define security standards across infrastructure and applications.

Requirements include 3+ years in a dedicated security role, 5+ years in infrastructure deployment, and knowledge of NIST/SANS, POPI/PCI governance, plus cloud/endpoint security.

Qualifications

• 3+ years in a dedicated security role
• 5+ years in infrastructure support and enterprise deployment
• Knowledge of NIST/SANS and governance (POPI, PCI)
• Experience with SOC operations and response practices
• Familiarity with Windows, Linux, MacOS, authentication methods and SIEM tools

Responsibilities

• Partner with architects, engineers, and IT teams to define security standards across infra and apps
• Design, configure, and implement security technologies and controls
• Monitor networks and endpoints for threats and unauthorized access attempts
• Conduct vulnerability assessments, penetration testing, and ethical hacking exercises
• Draft reports with action plans and support security governance activities

Skills

Analytical mindset

Communication skills

Team Player

Decision making under pressure

Education

Relevant IT degree or diploma

Security certifications (CompTIA Security+, CISSP, Azure/GIS, AWS or ISC Associate)

Job description

IT Security Specialist

Our client in the retail space is seeking a sharp, analytical professional with a collaborative mindset to strengthen our technology security team. This role will put you at the center of safeguarding our IT landscape, building secure solutions, and shaping the future of our cyber resilience.

What you'll be doing

• Partner with architects, engineers, and IT support teams to define and maintain security standards across infrastructure and applications.
• Design, configure, and implement security technologies and controls.
• Monitor networks and endpoints for threats, intrusions, and unauthorized access attempts.
• Recommend and implement enhancements to strengthen the security roadmap.
• Guide and mentor junior colleagues while educating staff on security best practices.
• Conduct vulnerability assessments, penetration testing, and ethical hacking exercises.
• Evaluate vendor technologies for alignment with organizational security requirements.
• Analyze existing systems, propose improvements, and draft detailed reports with action plans.
• Support automation of security processes where possible.
• Contribute to security governance through policy drafting, risk register updates, and change advisory participation.
• Stay up to date with emerging threats, frameworks, and tools through ongoing learning.

What you bring

Education & Certifications (one or more preferred):

• Relevant IT degree or diploma
• Security certifications such as CompTIA Security+, CISSP, Microsoft Certified (Azure/Systems Engineer), AWS or Google Cloud certifications, or ISC Associate

Experience

• At least 3 years in a dedicated security-focused role
• 5+ years in infrastructure support and enterprise solution deployment
• Strong working knowledge of networking, directory services (AD), and enterprise solutions (e.g., M365, Google Workspace, Cloud/Edge applications, vulnerability management)
• Familiarity with SOC operations and response practices
• Expertise across operating systems (Windows, Linux, MacOS), authentication methods, penetration testing, data leakage prevention, and endpoint/cloud security
• Experience with frameworks such as NIST or SANS (advantageous)
• Solid understanding of governance requirements (POPI, PCI, data protection policies) and SIEM tools
• Knowledge of cloud security, API controls, and web access firewalls

Soft Skills

• Analytical and solutions-oriented mindset
• Excellent communication and organizational skills
• Strong decision-making under pressure
• A team-first approach with a positive, professional attitude