Cybersecurity Officer

SUMMARY:
A diversified group, operating across the retail, manufacturing, and industrial sectors, is looking for a skilled and proactive Cybersecurity Officer to join their central team in Johannesburg. This role will focus on safeguarding a complex ecosystem of over 25 independently operated business units, each with its own IT infrastructure and systems.

POSITION INFO:
They’re seeking someone who can assess security risks at scale, create a group-wide cybersecurity strategy, and drive the implementation of controls and technologies that mitigate threats in both traditional and modern IT environments.

Responsibilities:

• Assess and identify cybersecurity risks and vulnerabilities across multiple business units and IT environments.
• Develop and enforce a group-wide cyber security strategy and roadmap.
• Design and implement risk-based security controls and monitoring systems.
• Lead the rollout of security tools and ensure consistent adoption across diverse environments.
• Work with IT and business leaders to create effective mitigation strategies.
• Evaluate the effectiveness of disaster recovery, operations, and security protocols.
• Review and respond to automated audit findings (e.g., via ALICE robotic control monitoring tool).
• Provide expert insight into the root cause of cyber issues and recommend process improvements.

• Minimum 2 years’ experience in cybersecurity and/or risk management.
• Strong knowledge of information security frameworks (e.g. ISO/IEC 27001, and NIST).
• Experience developing and implementing cybersecurity strategies.
• Solid understanding of network, cloud, infrastructure, and web application security.
• Familiarity with security incident response procedures and risk mitigation processes.
• Experience with tools such as SSIS, Informatica, AWS Glue, Airflow, and other ETL/monitoring tools is a plus.
• Qualifications:
  
  • Bachelor’s Degree or Diploma in Information Systems, Computer Science, or Information Security.
  • CISSP (Certified Information Systems Security Professional).
  • CISM (Certified Information Security Manager).
  • CISA (Certified Information Systems Auditor).
  • CISSP-ISSMP or equivalent certifications.