Senior Audit Manager Cybersecurity

Dj&R Consulting ( Nsse Holdings); Pretoria; On-site; ZAR 600,000 - 900,000; Full time

Job summary

A leading company in cybersecurity consulting seeks an experienced Cybersecurity Audit Manager. This role involves conducting crucial audits of public sector IT systems to ensure compliance with laws and regulations in South Africa. Candidates should have extensive experience in managing cybersecurity audits and incident response, alongside relevant educational qualifications and certifications. Join a dynamic team dedicated to improving public IT services.

Qualifications

• Minimum of 6 years’ experience post qualification, with 4+ years in management.
• Experience in cybersecurity maturity assessments, particularly in Southern Africa.
• Familiarity with NIST CSF, ISO 27001/2, CIS, and COBIT frameworks.

Responsibilities

• Manage timeous cybersecurity audits for public sector IT systems.
• Ensure compliance with relevant laws and regulations.
• Provide clients with insights and control recommendations.

Skills

Cybersecurity Audit Management

Network Security

Penetration Testing

Incident Response

Forensic Analysis

Education

NQF Level 8 Qualification (Bachelor’s Degree + Postgraduate Diploma)

B Com with specialisation in Auditing or IT

Certified Information Systems Auditor (CISA)

Job description

Manage the effective and timeous cybersecurity audits of public sector Information Technology (IT) systems, thereby ensuring a service is provided to the people of South Africa in terms of relevant laws and regulations.

REQUIREMENTS

Minimum qualification of National Qualifications Framework (NQF) Level 8

(i.e. 4 year Bachelor’s Degree/ National Diploma + post graduate Diploma)

e.g. B Com with specialisation in Auditing and/or Information Technology Certified Information Systems Auditor (CISA) or equivalent (e.g. a recognised IT auditing certification)

At least one of the following:

• Offensive Security Certified Professional (OSCP) or equivalent (e.g. CEH)

• Certified Incident Handler (ECIH/ GCIH) or equivalent (e.g. CRIA)

Experience.

Minimum of 6 years’ experience post qualification with at least 4 years’ experience operating at a manager/middle management level. Extensive experience in managing cybersecurity and network security audits, with a strong understanding of networked environments that support various application hosting infrastructures, including Windows and Unix based operating systems, as well as MSSQL and Oracle databases. Extensive experience in conducting cybersecurity maturity assessments, particularly within the Southern African context. This includes a strong ability to position insights and control recommendations for clients, guided by leading frameworks such as NIST CSF, ISO 27001/2, CIS, and COBIT

• Deep understanding of Penetration testing (pen testing) methodologies (e.g. MITRE ATT&CK) and ethical hacking principles.
• Deep understanding in cyberattack incident response, incident response frameworks (NIST 800-61, SANS PICERL) and forensic analysis (post incident investigation).

Send all CV's to

[e-mail]