Senior Information Security Analyst: Threat & Risk Guardian

Recruit-It; Gauteng; On-site; ZAR 700,000 - 1,000,000; Full time

Job summary

Recruit-It is seeking an Information Security Manager in Gauteng to lead security operations, risk management, and governance across client environments.

You will oversee security controls, incident response, and compliance with frameworks such as PCI-DSS, ISO 27001, SOC 2, GDPR/POPIA, and NIST. Collaboration with IT, risk, and business units is essential for embedding security into processes.

Qualifications

• Degree in Information Security, Cybersecurity, Computer Science, or related field.
• Familiarity with security frameworks (NIST, CIS, PCI-DSS, ISO 27001, GDPR)
• Understanding of network security, system architecture, and protocols
• Experience with SIEM, firewalls, IDS/IPS, and endpoint security
• Knowledge of vulnerability management and penetration testing

Responsibilities

• Monitor security alerts and investigate potential threats
• Support implementation and monitoring of security controls
• Maintain and administer security tools (antivirus, DLP, endpoint)
• Assist in risk assessments, vulnerability analysis, remediation prioritisation
• Contribute to incident response and post-incident reporting
• Engage with clients and stakeholders on security matters

Skills

Technical Expertise (L3)

Problem Solving (L3)

Planning and Organising (L3)

Customer Service (L3)

Oral and Written Communication (L3)

Education

Degree in Information Security / Cybersecurity / CS

Tools

SIEM tools

Firewalls

IDS/IPS

Endpoint security

Vulnerability management tooling

Penetration testing practices

Job description

Recruit-It is seeking an Information Security Manager in Gauteng to lead security operations, risk management, and governance across client environments.

You will oversee security controls, incident response, and compliance with frameworks such as PCI-DSS, ISO 27001, SOC 2, GDPR/POPIA, and NIST. Collaboration with IT, risk, and business units is essential for embedding security into processes.