Threat Exposure Management Lead — Risk & Remediation Strategist

Jordan Human Resources; Midrand; On-site; ZAR 600,000 - 1,200,000; Full time

Job summary

Jordan Human Resources seeks an experienced cybersecurity professional to lead vulnerability management and risk reduction across complex environments. The role focuses on threat-informed prioritisation, security testing and governance, with executive reporting to senior stakeholders and service providers.

A strong background in infrastructure, cloud, identity, and network security, plus relevant certifications, is highly valued for this position based in South Africa.

Qualifications

• Relevant degree or equivalent experience in cybersecurity, technology, engineering or risk management.
• Significant experience leading vulnerability management, exposure management, cyber-risk reduction, security testing or a related enterprise security capability.
• Strong knowledge of infrastructure, cloud, identity, application, API, network and telecommunications security.
• Experience coordinating remediation across complex technology and business environments.
• Strong understanding of attack-path analysis, threat-informed prioritisation, security assurance and exception governance.
• Experience managing executive reporting, governance forums, senior stakeholders and service providers.
• Relevant certification such as CISSP, CISM, CRISC, CCSP, OSCP or GIAC is advantageous.
• Knowledge of NIST CSF 2.0, MITRE ATT&CK, CISA KEV and FIRST EPSS is advantageous.

Skills

Vulnerability management

Threat-informed prioritisation

Security testing

Executive reporting

Security governance

Incident risk reduction

Cybersecurity leadership

Education

Relevant degree or equivalent experience in cybersecurity

Job description

Jordan Human Resources seeks an experienced cybersecurity professional to lead vulnerability management and risk reduction across complex environments. The role focuses on threat-informed prioritisation, security testing and governance, with executive reporting to senior stakeholders and service providers.

A strong background in infrastructure, cloud, identity, and network security, plus relevant certifications, is highly valued for this position based in South Africa.