Lead, Continuous Threat Exposure Management

Jordan Human Resources; Midrand; Presencial; ZAR 600.000 - 1.200.000; Jornada completa

Descripción de la vacante

Jordan Human Resources seeks an experienced cybersecurity professional to lead vulnerability management and risk reduction across complex environments. The role focuses on threat-informed prioritisation, security testing and governance, with executive reporting to senior stakeholders and service providers.

A strong background in infrastructure, cloud, identity, and network security, plus relevant certifications, is highly valued for this position based in South Africa.

Formación

• Relevant degree or equivalent experience in cybersecurity, technology, engineering or risk management.
• Significant experience leading vulnerability management, exposure management, cyber-risk reduction, security testing or a related enterprise security capability.
• Strong knowledge of infrastructure, cloud, identity, application, API, network and telecommunications security.
• Experience coordinating remediation across complex technology and business environments.
• Strong understanding of attack-path analysis, threat-informed prioritisation, security assurance and exception governance.
• Experience managing executive reporting, governance forums, senior stakeholders and service providers.
• Relevant certification such as CISSP, CISM, CRISC, CCSP, OSCP or GIAC is advantageous.
• Knowledge of NIST CSF 2.0, MITRE ATT&CK, CISA KEV and FIRST EPSS is advantageous.

Conocimientos

Vulnerability management

Threat-informed prioritisation

Security testing

Executive reporting

Security governance

Incident risk reduction

Cybersecurity leadership

Educación

Relevant degree or equivalent experience in cybersecurity

Descripción del empleo

Experience and Qualifications

• Relevant degree or equivalent experience in cybersecurity, technology, engineering or
• risk management.
• Significant experience leading vulnerability management, exposure management,
• cyber-risk reduction, security testing or a related enterprise security capability.
• Strong knowledge of infrastructure, cloud, identity, application, API, network and
• telecommunications security.
• Experience coordinating remediation across complex technology and business
• environments.
• Strong understanding of attack-path analysis, threat-informed prioritisation, security
• assurance and exception governance.
• Experience managing executive reporting, governance forums, senior stakeholders and
• service providers.
• Relevant certification such as CISSP, CISM, CRISC, CCSP, OSCP or GIAC is
• advantageous.
• Knowledge of NIST CSF 2.0, MITRE ATT&CK, CISA KEV and FIRST EPSS is advantageous.