Specialist IT Security

Motus GWM; South Africa; On-site; ZAR 650,000 - 900,000; Full time

Job summary

Motus GWM is seeking a Specialist IT Security to support Group cybersecurity governance, assurance, remediation management, and incident coordination across the organization. The role emphasizes maintaining ISMS compliance, tracking vulnerabilities, coordinating MDR/SOC activities, and producing governance-ready security reports for executive stakeholders.

The ideal candidate will have strong analytical skills and collaborate with internal teams while focusing on continuous SecOps improvement

Qualifications

• Minimum 3-5 years in IT security, governance, assurance, or incident coordination.
• Experience with ISMS and control assurance, risk tracking, and evidence management.
• Knowledge of vulnerability management, remediation SLAs, and risk acceptance processes.
• Experience with MDR/SOC operations and security incident processes.

Responsibilities

• Support group cybersecurity governance, assurance, remediation management, and incident coordination.
• Maintain ISMS and control trackers, validate evidence, and escalate high-risk actions.
• Coordinate actions from MDR alerts and cybersecurity incidents, including timelines and post-incident reviews.
• Prepare accurate cybersecurity reporting for governance and executives, highlighting risk trends and blockers.
• Identify improvements to detections, response playbooks, and SecOps processes, tracking enhancements to completion.
• Maintain visibility of security monitoring across endpoint security, logging, vulnerability scanning, cloud monitoring, and external attack-surface management.
• Capture monitoring gaps, assign owners, and report ageing or gaps.
• Support audits, control assurance reviews, third-party assessments, and security questionnaires with defensible evidence.
• Collaborate with Group/divisional teams, vendors, and security providers to ensure clear actions and escalation.

Skills

Cybersecurity governance

ISMS

Vulnerability management

Incident coordination

Security reporting

Stakeholder communication

Education

Bachelor's degree in IT/Cybersecurity

Tools

SIEM

Job description

Specialist IT Security

Duties would include, but are not limited to:

The role is responsible for supporting Group cybersecurity governance, assurance, remediation management, incident coordination, security reporting, and continuous SecOps improvement. The role is accountable for accurate tracking, validation, follow-up, escalation, and reporting, while technical remediation remains with the relevant system owners and the MDR/SOC provider retains responsibility for monitoring and detection operations.

• Maintaining the Group ISMS and control trackers, validating evidence, tracking agreed improvement actions, and escalating material control failures or overdue high-risk actions.
• Managing the end-to-end tracking, prioritisation, assignment, follow-up, validation, and closure reporting of vulnerability, penetration test, and external attack-surface findings.
• Coordinating internal actions arising from P1/P2 MDR alerts and cybersecurity incidents, including action logs, incident timelines, ownership, escalation, post-incident reviews, and closure tracking.
• Preparing accurate and timely cybersecurity reporting for governance and executive stakeholders, including risk trends, ageing, recurring findings, blockers, and decisions required.
• Identifying practical improvements to security detections, response playbooks, alert quality, and SecOps operating processes, and tracking agreed enhancements to completion.
• Maintaining a current view of security monitoring and coverage for critical systems across endpoint security, logging, vulnerability scanning, cloud monitoring, and external attack-surface management.
• Recording monitoring gaps, assigning accountable owners and target dates, validating closure evidence, and reporting material gaps and ageing.
• Supporting audits, control assurance reviews, third-party security assessments, and security questionnaires through complete, defensible, and traceable evidence.
• Collaborating with Group and divisional teams, vendors, and security service providers to maintain clear actions, decisions, accountability, and timely escalation.
• Protecting confidential and security-sensitive information and complying with approved cybersecurity policies, incident processes, and management instructions.

Qualifications and Experience

• Minimum of 3 - 5 years' experience in an IT security, cybersecurity governance, assurance, vulnerability management, or incident coordination role
• Relevant degree or diploma in Information Technology, Cybersecurity, Information Security, or a related field
• Experience within a large, multi-divisional or Automotive industry environment is highly advantageous
• Requirements
• Excellent communication and interpersonal skills to work with stakeholders across Group and divisional teams
• Strong knowledge of cybersecurity governance, ISMS and control assurance, risk tracking, and evidence management
• Practical knowledge of vulnerability management, penetration testing findings, remediation SLAs, approved extensions, and risk acceptance processes
• Practical understanding of MDR/SOC operations, security alert handling, incident coordination, escalation, and post-incident review processes
• Strong data analysis and reporting skills, with the ability to translate technical security information into clear, decision-useful management reporting
• Working knowledge of endpoint security, SIEM and logging, vulnerability scanning, cloud security monitoring, and external attack-surface management
• Strong analytical, problem-solving, and attention-to-detail skills to validate evidence, identify recurring weaknesses, and challenge incomplete closure
• Strong planning, project, and action-management skills to manage multiple deadlines, dependencies, escalations, and follow-ups
• Ability to work independently, exercise sound professional judgement, maintain confidentiality, and prioritise calmly during active security incidents
• Ability to collaborate constructively with internal technical teams, business stakeholders, auditors, and third-party security providers