Senior Specialist: Cyber Prevent

A 1L Realization (Pty) Ltd; Cape Town; In loco; ZAR 900.000 - 1.500.000; Tempo pieno

Descrizione del lavoro

A 1L Realization (Pty) Ltd is seeking an experienced cybersecurity professional with a strong background in information security, governance and risk management. The role requires expertise across multiple security domains, including assessment, architecture and operations, with a focus on evidence-based assurance.

The successful candidate will drive security strategy, coordinate cross-functional teams, and oversee vendor relationships, ensuring compliance with ISO/IEC 27001, NIST CSF and OWASP

Competenze

• Three-year technical diploma or degree in Information Security, Computer Science, Engineering or related discipline.
• Relevant industry certification (CISSP strongly preferred; CCSP, OSCP, CISM, CISA or equivalent)

Mansioni

• Lead cyber security programmes and security governance across multiple stakeholders or markets.
• Oversee risk, assurance and preventative security controls with a data-driven, evidence-based approach.
• Manage or coordinate security initiatives, vendor deliverables and contractual dependencies.

Conoscenze

Information Security

ISO/IEC 27001

NIST CSF

Security Governance

Cloud Security

Kubernetes

OWASP

Formazione

Degree in Information Security

Strumenti

Docker

GitHub

Descrizione del lavoro

Core competencies, knowledge and experience:

Three-year technical diploma or degree in Information Security, Computer Science, Engineering or a related discipline. Relevant industry certification. CISSP is strongly preferred; CCSP, OSCP, CISM, CISA or equivalent certifications will be SABSA, TOGAF or other security architecture qualifications are advantageous. Minimum of five years experience in a cyber security role, including responsibility for governance, risk, assurance or preventative security controls. Knowledge of recognised technology management and compliance frameworks, including ISO/IEC 27001, NIST CSF, ISF, PCI DSS, OWASP and SANS. Strong understanding of technology security risks, preventative controls, risk treatment and evidence-based assurance. Experience across at least three security domains, including security assessment and testing, software development security, governance and risk management, security architecture and engineering, network security, identity and access management, security operations or asset security. Experience managing or coordinating cyber security programmes, workstreams or control-improvement initiatives across multiple stakeholders or markets under defined governance and management oversight. Experience in KRI management, management reporting, data quality and workflow or reporting automation. Experience managing vendors, security deliverables, contractual dependencies and commercial performance Strong executive stakeholder management, written communication, presentation and escalation-management capability. Knowledge of Windows and Linux security, cloud and container technologies such as AWS, GCP, Azure, Docker and Kubernetes, and developer tooling such as GitHub and dependency-management platforms is advantageous. Ability to deliver under time, resource and operational pressure while maintaining quality and governance discipline. Ability to influence and collaborate across technical, business, market and executive stakeholders without relying on direct authority. Customer-focused, responsive, transparent and outcome-driven approach.