Senior Security Architect & Incident Leader

Ozow; Cape Town; Presencial; ZAR 1.200.000 - 1.800.000; Jornada completa

Descripción de la vacante

Ozow in South Africa is seeking a Senior Security Analyst to own and evolve our security programme, protecting the integrity, availability and confidentiality of our systems and data. Reporting into Infrastructure leadership, you will set direction and lift security capability across the business.

You will lead threat modelling, offensive security, incident response, vulnerability management, and compliance across PCI DSS, ISO 27001, POPIA, and SARB directives, translating risk into actionable

Formación

• Bachelor’s degree or equivalent in a related field.
• 8+ years in cybersecurity with leadership of a security programme.
• Hands-on penetration testing and adversary simulation experience.
• Experience with ISO 27001, NIST, PCI DSS, CIS Benchmarks, and OWASP.
• Experience selecting and implementing security tooling and cloud security.

Responsabilidades

• Own and evolve the security roadmap and risk-based priorities.
• Define standards, baselines, and testing methodology; mentor teams.
• Lead hands-on penetration testing and red team exercises.
• Own security tooling, detection strategy, and incident response.
• Drive vulnerability management, secure architectures, and CIS baselines.
• Embed security into engineering practices (DevSecOps) and audits.

Conocimientos

Security leadership

Penetration testing

Incident response

Threat modelling

DevSecOps

Cloud security

Compliance audits

Auditing

Educación

Bachelor’s degree in computer science, Information Security, or a related field

Herramientas

SIEM

EDR

WAFs

IDS/IPS

Cloud security tooling

Descripción del empleo

Ozow in South Africa is seeking a Senior Security Analyst to own and evolve our security programme, protecting the integrity, availability and confidentiality of our systems and data. Reporting into Infrastructure leadership, you will set direction and lift security capability across the business.

You will lead threat modelling, offensive security, incident response, vulnerability management, and compliance across PCI DSS, ISO 27001, POPIA, and SARB directives, translating risk into actionable