Lead Information Security Engineer - Cloud Security Focus

Placements24; Gauteng; On-site; ZAR 900,000 - 1,500,000; Full time

Job summary

Placements24 in Pretoria is seeking an experienced Lead Information Security Engineer to architect, implement, and manage cloud security across AWS, Azure, and GCP. This senior role focuses on policy development, threat modeling, and risk management in a multi-cloud setting.

The role requires on-site work in Pretoria, strong leadership, and the ability to drive security initiatives across multiple teams while ensuring confidentiality, integrity, and availability of data.

Qualifications

• 7+ years in information security, with 3+ years in cloud security.
• Experience securing AWS, Azure, or GCP cloud platforms.
• Familiarity with IaC and container security practices.
• Knowledge of ISO 27001, SOC 2, PCI DSS in cloud contexts.

Responsibilities

• Design, implement, and maintain security controls for multi-cloud environments.
• Develop and enforce cloud security policies, standards and procedures.
• Conduct security risk analyses for cloud-based apps and infra.
• Manage IAM and access controls for cloud resources.
• Develop automated security solutions for cloud deployments.
• Monitor for threats and incidents; coordinate containment and remediation.
• Lead DevSecOps integration within CI/CD pipelines.
• Perform regular security audits and compliance checks.

Skills

Leadership

Strategic thinking

Cloud security

Threat modeling

Risk management

Communication

Interpersonal skills

Education

Bachelor's degree in Computer Science, Engineering, Cybersecurity, or related field

Master's degree

Tools

Terraform

CloudFormation

Docker

Kubernetes

CloudWatch

Azure Monitor

SIEM

Job description

About the Role

Our client, a prominent financial institution headquartered in Pretoria, Gauteng , is actively seeking an experienced and forward-thinking Lead Information Security Engineer. This senior position is critical for architecting, implementing, and managing the security of our client's cloud infrastructure and services. You will be responsible for developing and enforcing security policies, standards, and procedures related to cloud environments (AWS, Azure, GCP). The ideal candidate will possess a deep understanding of cloud security best practices, threat modeling, and risk management in a complex, multi-cloud setting. This role requires a strategic mindset, leadership capabilities, and the ability to drive security initiatives across multiple teams. You will play a key role in ensuring the confidentiality, integrity, and availability of our client's sensitive data within the cloud. Based in Pretoria , this position requires consistent on-site presence to facilitate collaboration with key stakeholders and ensure the physical security of the infrastructure operations. This is a non-remote position.

Key Responsibilities

• Design, implement, and maintain security controls and architectures for cloud environments (AWS, Azure, GCP).
• Develop and enforce cloud security policies, standards, and best practices.
• Conduct security assessments and risk analyses of cloud-based applications and infrastructure.
• Implement and manage identity and access management (IAM) solutions for cloud resources.
• Develop and deploy automated security solutions for cloud deployments (e.g., security groups, network ACLs, WAFs).
• Monitor cloud environments for security threats and incidents, responding effectively to containment and remediation.
• Collaborate with development and operations teams to integrate security into the CI/CD pipeline (DevSecOps).
• Perform regular security audits and compliance checks against relevant regulatory frameworks.
• Lead incident response activities for cloud-related security breaches.
• Provide technical leadership and guidance to junior security engineers and analysts.
• Stay updated on emerging cloud security threats and technologies, and adapt strategies accordingly.
• Develop and maintain comprehensive security documentation for cloud infrastructure.

Requirements

• Bachelor's degree in Computer Science, Engineering, Cybersecurity, or a related field.
• Master's degree is a plus.
• Minimum of 7 years of experience in information security, with at least 3 years focused on cloud security.
• Proven experience securing major cloud platforms such as AWS, Azure, or GCP.
• Strong understanding of cloud networking, IAM, data security, and threat detection in cloud environments.
• Experience with Infrastructure as Code (IaC) tools (e.g., Terraform, CloudFormation) and their security implications.
• Familiarity with container security (e.g., Docker, Kubernetes).
• Experience with security monitoring and logging tools in cloud environments (e.g., CloudWatch, Azure Monitor, SIEM integration).
• Knowledge of compliance frameworks (e.g., ISO 27001, SOC 2, PCI DSS) in the context of cloud.
• Excellent leadership, communication, and interpersonal skills.
• Strong analytical and problem-solving abilities.
• Certifications such as CISSP, CCSP, AWS Certified Security – Specialty, or Azure Security Engineer are highly desirable.
• Must be able to work on-site in Pretoria, Gauteng , South Africa.

Benefits

• Highly competitive salary and performance-based bonuses.
• Comprehensive medical, dental, and vision insurance.
• Generous retirement savings plan.
• Paid time off, including vacation, sick leave, and public holidays.
• Continuous learning opportunities and support for professional certifications.
• Access to advanced security technologies and training programs.
• Engaging and challenging work environment within a respected financial institution.
• Opportunities for career growth and leadership development.