Forensic jobs in South Africa
Manager in Cyber Forensic and Response
KPMG South Africa
Senior Forensic Investigator
Clicks Group
Director
North-West University / Noordwes-Universiteit
Senior Forensic Pathology Expert & Expert Witness
Bebeepathologist
Lead Forensic Pathology Expert
Bebeepathologist
Discover more opportunities than anywhere else. Find more jobs nowChief Forensic Services Leader - Strategy & Growth
Bdo South Africa
Risk Administrator Sandton
Digiterra (Pty) Ltd.
National Forensic Services Growth & Strategy Leader
Bdo South Africa
Connect with headhunters to apply for similar jobsAzure Forensics & Incident Response Manager
Kpmg South Africa
Investigator Market Related
Macsteel Service Centres Sa (Pty) Ltd
Deputy Manager - Forensic Services
Department Of Health
Advanced Medical Practitioner (Forensic Medicine)
Bebeepathology
Forensic Risk Events Coordinator
Gijima Holdings
Risk Event Administrator
Gijima Holdings
Open Source Intelligence Specialist
findojobs-za
Senior Forensic Investigator: Fraud Risk & Investigations Lead
Clicks Group
Network Security Engineer
Interfront SOC
Risk and Health and Safety Advisor
West London NHS Trust
Senior Banking Fraud Forensics Investigator
Capitec Bank Ltd.
Senior Forensic Investigator - Banking Fraud & Risk
Capitec Bank Ltd.
Azure Forensics & Incident Response Manager
KPMG South Africa
Manager in Cyber Forensic and Response
Job summary
A leading consulting firm in Johannesburg is seeking a Manager in Cyber Forensic and Response to manage secure and efficient forensic infrastructure on Azure. The ideal candidate should have 4–8 years of experience in IT/security operations and at least 3 years managing Azure environments. Relevant Azure certifications and a degree in IT or related fields are preferred. This role is crucial for supporting incident response teams and ensuring compliance with security standards.
Qualifications
- B.Sc. or M.Sc. in IT, Computer Science, Cybersecurity, or related field is required.
- 4-8 years experience in IT/security operations, with 3+ years managing Azure environments.
- Relevant certifications in Microsoft Azure and forensic examination are preferred.
Responsibilities
- Manage cloud-based forensic infrastructure on Microsoft Azure.
- Administer forensic systems hosted on Azure for case management and data storage.
- Coordinate internal IT for connectivity and resilience of forensic systems.
- Evaluate new forensic tools within the Azure ecosystem.
Skills
Education
Tools
Job title : Manager in Cyber Forensic and Response
Job Location : Gauteng, Johannesburg
Deadline : January 05, 2026
- Jobs by Location
- Job by industries
Manage and maintain the cloud-based forensic and investigation infrastructure hosted on Microsoft Azure, ensuring secure, reliable, and efficient operation of digital forensics, data analytics, and evidence management platforms.
- Administer and maintain all forensic and investigation systems hosted on Azure — including case management, data storage, analytics environments, and automation pipelines.
- Design and manage Azure-based forensic environments, such as isolated investigation VMs, Azure Sentinel workspaces, and secure evidence vaults.
- Support forensic and incident response teams with data ingestion, extraction, and queries from diverse sources (Azure logs, O365, endpoints, and third-party integrations).
- Automate data collection, enrichment, and correlation across Azure services using Logic Apps, PowerShell, and Azure Functions.
- Implement and enforce role-based access control (RBAC) and ensure compliance with evidence handling, retention, and privacy standards.
- Knowledge of configurations relating to RAG, Agentic AI and document analyser, Azure AI etc.
- Monitor and optimize Azure resource performance, cost, and security posture for forensic workloads.
- Coordinate with internal IT and security teams to maintain connectivity, patching, and resilience of forensic systems.
- Evaluate and integrate new forensic and data management tools within the Azure ecosystem to enhance investigative capabilities.
- Manage the Azure environment used by front end investigation teams.
- B.Sc. or M.Sc. in Information Technology, Computer Science, Cybersecurity, or related field.
- Microsoft Certified : Azure Administrator Associate (AZ-104)
- Microsoft Certified : Azure Security Engineer Associate (AZ-500)
- Azure Solutions Architect Expert (AZ-305)
- GIAC Certified Forensic Examiner (GCFE) or CHFI
- Splunk / Kusto Query Language (KQL) proficiency
- 4–8 years in IT or security operations, with 3+ years managing Azure environments for security, data analytics, or forensic purposes.
- Expert in Azure services such as Sentinel, Log Analytics, Defender for Cloud, Blob Storage, Key Vault, Logic Apps, RAG, Document Analyser and Azure Automation.
- Knowledge of proficiency in KQL, PowerShell, and Python for data extraction and automation.
- Understanding of forensic workflows, evidence integrity, and digital investigation processes.
- Knowledge of data retention, encryption, and compliance frameworks.
* The salary benchmark is based on the target salaries of market leaders in their relevant sectors. It is intended to serve as a guide to help Premium Members assess open positions and to help in salary negotiations. The salary benchmark is not provided directly by the company, which could be significantly higher or lower.