Senior Cybersecurity Engineer - Compliance & Technology

ATS Client; Sandton; On-site; ZAR 900,000 - 1,600,000; Full time

Job summary

ATS Client in Sandton seeks an experienced cybersecurity engineer to design, implement, and maintain robust security controls across on‑prem, cloud, and hybrid environments. You will monitor threats, lead incident response, and coordinate audits while aligning with ISO 27001, NIST, and GDPR requirements.

The role requires 7+ years in cybersecurity, hands‑on SIEM/EDR experience, and cloud security proficiency in AWS/Azure/GCP.

Qualifications

• Matric (Grade 12) required.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• 7+ years' experience in cybersecurity engineering, security operations, or infrastructure security roles.
• Strong hands‑on experience with security technologies including SIEM, EDR, firewalls, and vulnerability management tools.
• Solid understanding of network security, cloud security, and endpoint protection.
• Experience with compliance frameworks such as ISO 27001, NIST, CIS Controls, POPIA, and GDPR.
• Proven experience supporting internal and external audits and broader regulatory compliance requirements.
• Experience with cloud platforms such as AWS, Azure, or Google Cloud.
• Strong understanding of IAM, PAM, and Zero Trust security principles.
• Certifications such as CISSP, CISM, CompTIA Security+, CySA+, ISO 27001 Lead Implementer/Auditor.
• Cloud security certifications (AWS/GCP/Azure) preferred.

Responsibilities

• Design, implement, and maintain cybersecurity controls across on‑premise, cloud, and hybrid environments.
• Monitor security environments for threats, anomalies, and suspicious activity, ensuring timely detection and response.
• Lead investigation and response to security incidents, including root cause analysis and remediation actions.
• Perform regular vulnerability scanning and coordinate penetration testing activities with internal and external parties.
• Ensure secure configuration and hardening of servers, networks, endpoints, and cloud workloads.
• Support secure architecture design for new systems, applications, and infrastructure projects.
• Apply security‑by‑design principles across all technology implementations and changes.
• Ensure compliance with relevant security frameworks including ISO 27001, NIST, CIS Controls, POPIA, GDPR, and internal governance standards.
• Support internal and external audits by preparing evidence, addressing findings, and tracking remediation activities.
• Maintain and improve cybersecurity policies, procedures, and standards.
• Produce regular security reports, dashboards, and risk summaries for technical and executive stakeholders.
• Collaborate with SOC teams, MSSPs, and third‑party security providers.
• Drive security awareness initiatives and contribute to training across the organisation.

Skills

Security operations

Threat detection

IAM & PAM

Zero Trust

Security reporting

Risk assessment

Security governance

Compliance awareness

Education

Bachelor's degree in Cybersecurity/IT/CS

Matric (Grade 12)

Tools

SIEM

EDR

Firewalls

IDS/IPS

Cloud security (AWS/Azure/GCP)

Job description

Role Purpose

The successful candidate will play a critical role in protecting the organisation's systems, data, and infrastructure by designing, implementing, and maintaining robust security controls. The role combines strong technical cybersecurity capability with deep knowledge of compliance and regulatory frameworks to ensure the organisation remains secure, resilient, and audit-ready. You will work closely with infrastructure, cloud, application, risk, and audit teams to embed security across all layers of the technology environment while actively identifying and mitigating threats.

Key Responsibilities

• Design, implement, and maintain cybersecurity controls across on‑premise, cloud, and hybrid environments


• Manage and optimise security technologies including SIEM, EDR, firewalls, IDS/IPS, endpoint protection, and vulnerability management tools


• Monitor security environments for threats, anomalies, and suspicious activity, ensuring timely detection and response


• Lead investigation and response to security incidents, including root cause analysis and remediation actions


• Perform regular vulnerability scanning and coordinate penetration testing activities with internal and external parties


• Ensure secure configuration and hardening of servers, networks, endpoints, and cloud workloads


• Support secure architecture design for new systems, applications, and infrastructure projects


• Apply security‑by‑design principles across all technology implementations and changes


• Ensure compliance with relevant security and regulatory frameworks including ISO 27001, NIST, CIS Controls, POPIA, GDPR, and internal governance standards


• Support internal and external audits by preparing evidence, addressing findings, and tracking remediation activities


• Maintain and improve cybersecurity policies, procedures, and standards


• Conduct risk assessments and support enterprise risk management processes


• Produce regular security reports, dashboards, and risk summaries for technical and executive stakeholders


• Support Identity and Access Management (IAM), including privileged access management and authentication controls


• Contribute to cloud security governance across platforms such as AWS, Azure, or Google Cloud


• Implement and maintain data protection controls including encryption, data classification, and Data Loss Prevention (DLP)


• Support business continuity and disaster recovery planning from a cybersecurity perspective


• Collaborate with SOC teams, MSSPs, and third‑party security providers


• Drive security awareness initiatives and contribute to training across the organisation

Qualifications and Experience

• Matric (Grade 12) required


• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field


• 7+ years' experience in cybersecurity engineering, security operations, or infrastructure security roles


• Strong hands‑on experience with security technologies including SIEM, EDR, firewalls, and vulnerability management tools


• Solid understanding of network security, cloud security, and endpoint protection


• Experience working with compliance frameworks such as ISO 27001, NIST, CIS Controls, POPIA, and GDPR


• Proven experience supporting internal and external audits and broader regulatory compliance requirements


• Experience working with cloud platforms such as AWS, Azure, or Google Cloud


• Strong understanding of Identity and Access Management (IAM), Privileged Access Management (PAM), and Zero Trust security principles


• CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), CompTIA Security+, CompTIA CySA+ (Cybersecurity Analyst), ISO 27001 Lead Implementer, or ISO 27001 Lead Auditor


• AWS Certified Security – Specialty, Microsoft Certified: Azure Security Engineer Associate, or GIAC Security Certifications (e.g., GSEC, GCIH)

Department: Information Technology • Locations: Headquarters