Specialist - Cyber Security VFS and DLS

ATS Client; Midrand; On-site; ZAR 1,000,000 - 1,400,000; Full time

Job summary

ATS Client seeks a Senior Specialist: Cyber Security to lead the cyber security programme within its Information Technology division in South Africa. The role requires deep expertise across governance, risk, controls and compliance, with hands-on experience in GSM network environments and cloud security principles.

You will drive strategic initiatives, oversee multiple projects, and protect critical assets.

Qualifications

• Bachelor's degree or equivalent in IT/cyber security or related field.
• 8+ years in cyber security roles with a proven track record.
• 5+ years in governance, risk, controls and compliance.
• 3-5 years IT audit and assurance management in cyber/tech env.
• Strong knowledge of ISO/IEC 27001, SOC 2, SOX, ITIL, COBIT, and NIST.
• Understanding of PII protection and PCI-DSS compliance.
• Cloud security risk, compliance, and assurance knowledge.
• Experience managing multiple cyber security programmes/projects.
• Strategic thinking, stakeholder influence, and change leadership.
• Security risks in GSM network infra; broad cyber domains.
• DNS, routing, auth, proxies, VPNs, DDoS mitigation.
• Windows, UNIX, and Linux; Web security and encryption.

Responsibilities

• Drive and enhance cyber security posture for VFS and DLS entities.
• Develop, implement, and maintain a comprehensive cyber security programme.
• Provide strategic leadership and oversight of programmes and projects.
• Protect critical systems, data, and digital assets against threats.
• Influence stakeholders and drive organisational change.

Skills

Strategic thinking

Stakeholder influence

Organisational change

Cyber security leadership

Risk management

Education

Bachelor's degree in IT/Cyber Security/CS

Tools

Firewall technologies

VPN technologies

IDS/IPS

NAC & network segmentation

PSI/PCI-DSS knowledge

Job description

Our client, a leading organisation in the telecommunications industry, is seeking an experienced Senior Specialist: Cyber Security to join their Information Technology division.

The successful candidate will be responsible for driving and enhancing the cyber security posture of the VFS and DLS financial services entities. This role requires a deep understanding of cyber security frameworks, emerging threats, industry best practices, and regulatory requirements. The incumbent will provide strategic leadership in the development, implementation, and maintenance of a comprehensive cyber security programme, ensuring the protection of critical systems, data, and digital assets.

Minimum Requirements

• Bachelor's Degree or relevant tertiary qualification in Information Technology, Cyber Security, Computer Science, or a related field.
• Minimum of 8 years' experience in Cyber Security roles with a proven track record of delivering against business objectives and strategic outcomes.
• At least 5 years' experience in Cyber Security Governance, Risk Management, Controls, and Compliance within a technology-driven environment.
• A minimum of 3-5 years' experience in IT Audit and Assurance Management within a cyber security or broader technology environment.
• Strong knowledge of industry‑recognized information security and compliance frameworks, including ISO/IEC 27001, SOC 2, SOX, ITIL, COBIT, and NIST.
• Sound understanding of legal, regulatory, and privacy requirements, including Personally Identifiable Information (PII) Protection and Payment Card Industry Data Security Standard (PCI-DSS) compliance.
• High‑level understanding of Cloud Security Risk, Compliance, and Assurance principles and practices.
• Demonstrated experience in managing and overseeing multiple cyber security programmes, projects, and strategic initiatives simultaneously.
• Proven ability to think strategically, influence stakeholders, and drive organisational change.
• Deep understanding of technology security risks and associated mitigation strategies, particularly within GSM Network Infrastructure environments.
• Broad cyber security expertise across multiple domains, including:
  • Layered security architecture
  • Internet protocols and network security
  • Firewalls and VPN technologies
  • Intrusion Detection and Prevention Systems (IDS/IPS)
  • Network Access Control (NAC) and network segmentation
  • Anti‑malware and anti‑spam technologies
  • Risk and vulnerability assessments
  • Regulatory and compliance management
• Strong knowledge of security concepts related to DNS, routing, authentication, proxy services, VPNs, and DDoS mitigation technologies.
• Hands‑on experience with Windows, UNIX, and Linux operating systems.
• Comprehensive understanding of Web Security, Encryption Technologies, and Secure Communication Protocols.