Senior Cybersecurity Engineer - Compliance & Technology

About the role

The successful candidate will play a critical role in protecting the organisation’s systems, data, and infrastructure by designing, implementing, and maintaining robust security controls. The role combines strong technical cybersecurity capability with deep knowledge of compliance and regulatory frameworks to ensure the organisation remains secure, resilient, and audit‑ready.

Key responsibilities

• Design, implement, and maintain cybersecurity controls across on‑premise, cloud, and hybrid environments.
• Manage and optimise security technologies including SIEM, EDR, firewalls, IDS/IPS, endpoint protection and vulnerability management tools.
• Monitor security environments for threats, anomalies and suspicious activity, ensuring timely detection and response.
• Lead investigation and response to security incidents, including root‑cause analysis and remediation.
• Perform regular vulnerability scanning and coordinate penetration testing activities.
• Ensure secure configuration and hardening of servers, networks, endpoints and cloud workloads.
• Support secure architecture design for new systems, applications and infrastructure projects.
• Apply security‑by‑design principles and ensure compliance with ISO 27001, NIST, CIS Controls, POPIA, GDPR and internal standards.
• Support internal and external audits by preparing evidence, addressing findings and tracking remediation.
• Maintain and improve cybersecurity policies, procedures and standards, and produce regular security reports for technical and executive stakeholders.

Required profile

• Matric (Grade 12) and a Bachelor’s degree in Cybersecurity, IT, Computer Science or related field.
• 7+ years’ experience in cybersecurity engineering, security operations or infrastructure security.
• Proven experience supporting internal and external audits and regulatory compliance.
• Strong hands‑on experience with security technologies such as SIEM, EDR, firewalls and vulnerability management tools.
• Relevant certifications (e.g., CISSP, CISM, CompTIA Security+, ISO 27001 Lead Implementer, AWS Certified Security – Specialty).

Required skills

• SIEM platforms
• Endpoint Detection & Response (EDR)
• Firewalls and IDS/IPS
• Vulnerability management and penetration testing tools
• Secure configuration and hardening of servers, networks and cloud workloads
• Cloud platforms: AWS, Azure, Google Cloud
• Identity and Access Management (IAM) and Privileged Access Management (PAM)
• Zero Trust security principles
• Encryption, data classification and Data Loss Prevention (DLP)
• Incident response and root‑cause analysis