Senior Cybersecurity Engineer - Compliance & Technology

Adeo South Africa Limited; Gauteng; On-site; ZAR 900,000 - 1,500,000; Full time

Job summary

Adeo South Africa Limited is seeking a senior cybersecurity engineer to design, implement, and maintain robust security controls across on-premise, cloud, and hybrid environments. You will work with infrastructure, risk, and audit teams to embed security across the technology stack, ensuring resilience and audit readiness.

The role requires 7+ years in cybersecurity, hands-on work with SIEM, EDR, firewalls, and vulnerability management, plus strong knowledge of ISO 27001, NIST, POPIA and GDPR.

Qualifications

• 7+ years in cybersecurity engineering, security operations, or infrastructure security.
• Hands-on experience with SIEM, EDR, firewalls, and vulnerability management tools.
• Strong knowledge of network and cloud security, endpoint protection.
• Experience with ISO 27001, NIST, CIS Controls, POPIA, and GDPR compliance.
• Experience supporting internal and external audits and regulatory requirements.

Responsibilities

• Design, implement, and maintain cybersecurity controls across on-premise, cloud, and hybrid environments
• Manage and optimise security technologies including SIEM, EDR, firewalls, IDS/IPS, endpoint protection, and vulnerability management tools
• Monitor security environments for threats, anomalies, and suspicious activity
• Lead investigation and response to security incidents with root cause analysis
• Perform regular vulnerability scanning and coordinate penetration testing activities
• Ensure secure configuration and hardening of servers, networks, endpoints, and cloud workloads
• Support secure architecture design for new systems and projects
• Ensure compliance with ISO 27001, NIST, CIS Controls, POPIA, GDPR
• Support audits by preparing evidence and tracking remediation
• Drive security awareness initiatives and training

Skills

Cybersecurity engineering

Security operations

Infrastructure security

Threat monitoring

Incident response

Vulnerability management

Cloud security

Education

Bachelor’s degree in Cybersecurity or related field

Matric (Grade 12)

Tools

SIEM

EDR

Firewalls

IDS/IPS

Vulnerability scanning tools

Cloud security tooling

IAM

Zero Trust

Job description

Role Purpose

The successful candidate will play a critical role in protecting the organisation’s systems, data, and infrastructure by designing, implementing, and maintaining robust security controls. The role combines strong technical cybersecurity capability with deep knowledge of compliance and regulatory frameworks to ensure the organisation remains secure, resilient, and audit-ready. You will work closely with infrastructure, cloud, application, risk, and audit teams to embed security across all layers of the technology environment while actively identifying and mitigating threats.

Key Responsibilities

• Design, implement, and maintain cybersecurity controls across on-premise, cloud, and hybrid environments
• Manage and optimise security technologies including SIEM, EDR, firewalls, IDS/IPS, endpoint protection, and vulnerability management tools
• Monitor security environments for threats, anomalies, and suspicious activity, ensuring timely detection and response
• Lead investigation and response to security incidents, including root cause analysis and remediation actions
• Perform regular vulnerability scanning and coordinate penetration testing activities with internal and external parties
• Ensure secure configuration and hardening of servers, networks, endpoints, and cloud workloads
• Support secure architecture design for new systems, applications, and infrastructure projects
• Apply security-by-design principles across all technology implementations and changes
• Ensure compliance with relevant security and regulatory frameworks including ISO 27001, NIST, CIS Controls, POPIA, GDPR, and internal governance standards
• Support internal and external audits by preparing evidence, addressing findings, and tracking remediation activities
• Maintain and improve cybersecurity policies, procedures, and standards
• Conduct risk assessments and support enterprise risk management processes
• Produce regular security reports, dashboards, and risk summaries for technical and executive stakeholders
• Support Identity and Access Management (IAM), including privileged access management and authentication controls
• Contribute to cloud security governance across platforms such as AWS, Azure, or Google Cloud
• Implement and maintain data protection controls including encryption, data classification, and Data Loss Prevention (DLP)
• Support business continuity and disaster recovery planning from a cybersecurity perspective
• Collaborate with SOC teams, MSSPs, and third-party security providers
• Drive security awareness initiatives and contribute to training across the organisation

Qualification and Experience

• Matric (Grade 12) required
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field
• 7+ years’ experience in cybersecurity engineering, security operations, or infrastructure security roles
• Strong hands‑on experience with security technologies including SIEM, EDR, firewalls, and vulnerability management tools
• Solid understanding of network security, cloud security, and endpoint protection
• Experience working with compliance frameworks such as ISO 27001, NIST, CIS Controls, POPIA, and GDPR
• Proven experience supporting internal and external audits and broader regulatory compliance requirements
• Experience working with cloud platforms such as AWS, Azure, or Google Cloud
• Strong understanding of Identity and Access Management (IAM), Privileged Access Management (PAM), and Zero Trust security principles CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), CompTIA Security+, CompTIA CySA+ (Cybersecurity Analyst), ISO 27001 Lead Implementer, or ISO 27001 Lead Auditor
• AWS Certified Security – Specialty, Microsoft Certified: Azure Security Engineer Associate, or GIAC Security Certifications (e.g., GSEC, GCIH)