Cyber Security Administrator – Johannesburg

About the role

The role focuses on identifying, assessing and mitigating cyber security and privacy risks for new and existing products and services. You will ensure security controls are embedded throughout the product lifecycle and provide assurance before go‑live.

Key responsibilities

• Identify potential cyber security risks for new products, services and operations and define controls to mitigate them.
• Implement and verify security and privacy controls, ensuring they are built into products before launch.
• Assess security and privacy impacts of changes to live products and manage decommissioning risks.
• Drive cyber security strategy, maturity improvement and risk reduction initiatives within the assigned business unit.
• Provide technology security assurance, guidance and support for high‑profile projects and ensure security is embedded in IT systems and network infrastructure.
• Maintain compliance with legal, regulatory and corporate risk appetite requirements.
• Conduct formal information security risk analyses, audits and self‑assessments, and design remediation actions.

Required profile

• 3‑year Technical Diploma or Degree in Information Security, Computer Science or Engineering.
• 3‑5 years of experience in a cyber security role.
• Industry certification such as CISSP (preferred) or CCSP, OSCP, CISM, CISA.
• Knowledge of frameworks like ISO/IEC 27001, NIST CSF, ISF, PCI DSS, OWASP, SANS.

Required skills

• Security domains expertise: assessment & testing, software development security, governance & risk management, architecture, network security, IAM, operations, asset security.
• Experience with DevSecOps, application security, security architecture or offensive security.
• Operating system hardening for Windows and Linux.
• Programming languages: Java, PHP, Python, Ruby, Perl.
• Cloud and container technologies: AWS, GCP, Azure, Docker, Kubernetes.
• Tools and practices: SAST, DAST, Security as Code, CI/CD pipelines, GitHub.