Security Analyst

Biovac; Cape Town; On-site; ZAR 40 000 - 60 000; Full time

Job summary

A leading vaccine manufacturer based in Cape Town is seeking a dynamic Security Analyst. In this role, you will be responsible for monitoring security alerts, managing vulnerabilities, and driving compliance. The ideal candidate will have at least 5 years of experience in cyber-security, a relevant degree, and familiarity with regulatory frameworks. This position offers a chance to contribute to life-saving programs within a passionate team.

Qualifications

• 5+ years experience in IT security operations or cyber-security analysis.
• Familiarity with patch management, identity access management, and risk assessment processes.
• Understanding of network, endpoint, and application security controls.

Responsibilities

• Monitor and analyze security alerts from various systems and tools.
• Investigate potential incidents and coordinate remediation.
• Perform regular vulnerability scans and risk assessments.

Skills

Incident Response

Threat Monitoring

Vulnerability Management

SIEM Tools

EDR Tools

Log Analysis

Education

Bachelors Degree or National Diploma in Information Security

Tools

SIEM

EDR

IDS/IPS

Job description

BIOVAC is one of the leading sterile vaccine manufacturers rooted in Africa, with our core purpose being to "protect life". We are looking to hire a dynamic, passionate, confident, proactive and meticulous Security Analyst to join a goal‑oriented team.

QUALIFICATIONS NEEDED:

Required:

• Bachelors Degree or National Diploma in Information Security, Computer Science, or related field

Preferred:

• Industry certifications such as CompTIA Security+, CEH, CISSP
• Training or experience in GxP, ISO 27001, or NIST frameworks
• Experience in pharmaceutical, manufacturing, or regulated industries

Experience needed to deliver the role seamlessly:

• Minimum 5 years experience in IT security operations or cyber‑security analysis
• Experience in threat monitoring, incident response, and vulnerability management
• Hands‑on experience with SIEM, EDR, and log analysis tools
• Understanding of network, endpoint, and application security controls
• Familiarity with patch management, identity access management, and risk assessment processes

Preferred:

• Experience supporting GxP‑compliant environments
• Exposure to regulatory frameworks (GDPR, POPIA, ISO 27001, NIST)
• Knowledge of secure configurations and system hardening practices

KEY DUTIES & RESPONSIBILITIES OF THE ROLE:

Core Technical Delivery:

Security Monitoring and Incident Response

• Monitor and analyze security alerts from various systems and tools (SIEM, EDR, IDS/IPS)
• Investigate potential incidents and coordinate remediation with relevant teams
• Maintain an incident response plan and participate in simulations or tabletop exercises
• Document incidents, lessons learned, and develop preventive measures

Vulnerability and Risk Management

• Perform regular vulnerability scans, risk assessments, and patch validation
• Track remediation of vulnerabilities and report on closure progress
• Support IT teams in secure configurations and system hardening
• Maintain risk registers and contribute to mitigation planning

Access Control and Compliance

• Support user access reviews, segregation of duties, and privileged account monitoring
• Ensure alignment with regulatory and internal security requirements
• Maintain documentation for audits and compliance checks
• Contribute to policy and procedure development

Contribute to cyber‑security awareness initiatives and user training

• Research and recommend new security technologies and best practices
• Support audits, vulnerability assessments, and penetration testing
• Drive continuous improvement in incident response and monitoring capabilities

Quality Management

• Ensure all security processes are aligned with GxP, GMP, and data integrity requirements
• Support audits and ensure findings are addressed promptly
• Maintain documentation for incidents, CAPAs, and security validations

Application Deadline: 30 November 2025

If you do not receive a response from us within three weeks after closing date please understand that your application was not successful.

Disclaimer:

Dear Applicant, we appreciate your interest in joining our organization. It is imperative for us that you understand how we handle your information. We are committed to ensuring the security and confidentiality of the information you provide. Your personal details will be collected for the sole purpose of the application process and will be used strictly for that purpose. By applying, you acknowledge and consent to the collection, use, and protection of your personal information in accordance with our privacy policy. If you have any inquiries or concerns, our Human Capital department is available to provide clarification. We look forward to reviewing your application.

For detailed information on data handling, please review our privacy notice: https://www.biovac.co.za/wp-content/uploads/2022/08/published_Biovac-Privacy-Notice-20220617-2306-en.pdf