About the Role
Our client, a prominent financial institution headquartered in Pretoria, Gauteng , is actively seeking an experienced and forward-thinking Lead Information Security Engineer. This senior position is critical for architecting, implementing, and managing the security of our client's cloud infrastructure and services. You will be responsible for developing and enforcing security policies, standards, and procedures related to cloud environments (AWS, Azure, GCP). The ideal candidate will possess a deep understanding of cloud security best practices, threat modeling, and risk management in a complex, multi-cloud setting. This role requires a strategic mindset, leadership capabilities, and the ability to drive security initiatives across multiple teams. You will play a key role in ensuring the confidentiality, integrity, and availability of our client's sensitive data within the cloud. Based in Pretoria , this position requires consistent on-site presence to facilitate collaboration with key stakeholders and ensure the physical security of the infrastructure operations. This is a non-remote position.
Key Responsibilities
- Design, implement, and maintain security controls and architectures for cloud environments (AWS, Azure, GCP).
- Develop and enforce cloud security policies, standards, and best practices.
- Conduct security assessments and risk analyses of cloud-based applications and infrastructure.
- Implement and manage identity and access management (IAM) solutions for cloud resources.
- Develop and deploy automated security solutions for cloud deployments (e.g., security groups, network ACLs, WAFs).
- Monitor cloud environments for security threats and incidents, responding effectively to containment and remediation.
- Collaborate with development and operations teams to integrate security into the CI/CD pipeline (DevSecOps).
- Perform regular security audits and compliance checks against relevant regulatory frameworks.
- Lead incident response activities for cloud-related security breaches.
- Provide technical leadership and guidance to junior security engineers and analysts.
- Stay updated on emerging cloud security threats and technologies, and adapt strategies accordingly.
- Develop and maintain comprehensive security documentation for cloud infrastructure.
Requirements
- Bachelor's degree in Computer Science, Engineering, Cybersecurity, or a related field. Master's degree is a plus.
- Minimum of 7 years of experience in information security, with at least 3 years focused on cloud security.
- Proven experience securing major cloud platforms such as AWS, Azure, or GCP.
- Strong understanding of cloud networking, IAM, data security, and threat detection in cloud environments.
- Experience with Infrastructure as Code (IaC) tools (e.g., Terraform, CloudFormation) and their security implications.
- Familiarity with container security (e.g., Docker, Kubernetes).
- Experience with security monitoring and logging tools in cloud environments (e.g., CloudWatch, Azure Monitor, SIEM integration).
- Knowledge of compliance frameworks (e.g., ISO 27001, SOC 2, PCI DSS) in the context of cloud.
- Excellent leadership, communication, and interpersonal skills.
- Strong analytical and problem-solving abilities.
- Certifications such as CISSP, CCSP, AWS Certified Security – Specialty, or Azure Security Engineer are highly desirable.
- Must be able to work on-site in Pretoria, Gauteng , South Africa.
Benefits
- Highly competitive salary and performance-based bonuses.
- Comprehensive medical, dental, and vision insurance.
- Generous retirement savings plan.
- Paid time off, including vacation, sick leave, and public holidays.
- Continuous learning opportunities and support for professional certifications.
- Access to advanced security technologies and training programs.
- Engaging and challenging work environment within a respected financial institution.
- Opportunities for career growth and leadership development.