Manager: Cyber Security Operations Centre (CSOC)

About the role

SARS is looking for a cybersecurity specialist to lead the Cyber Security Operations Centre (CSOC) and User Access Management (UAM) functions. The role reports to the Area Head IT Security Operations and sits in the Strategy Enablement & Modernisation division at the Pretoria head office. It turns information security strategy into operational execution, covering security monitoring, incident response, identity and access management, security governance and operational risk management, and managing both internal teams and outsourced security service providers.

Key responsibilities

• Lead and manage CSOC and UAM, ensuring effective monitoring, detection, investigation and response to cyber threats, and strengthen identity and access management and operational resilience.
• Direct, control and optimise budgeted resources, turn the tactical security strategy into a measurable operational plan, and report periodically on performance and progress.
• Monitor security controls, service delivery standards, risks and compliance, and implement corrective actions where needed.
• Provide technical direction for systems that protect SARS assets and liaise with vendors to resolve product and service issues.
• Implement governance, risk and compliance policy in the area, and comply with internal control and governance standards in finance and procurement.
• Develop people capacity plans, set performance metrics and goals, and ensure compliance with health, safety, security and workplace policies.
• Prepare a budget aligned to delivery plans, monitor costs and report on cost efficiency.
• Build strong relationships with internal and external stakeholders and implement service level agreements.

Required profile

• Bachelor's degree or advanced diploma (NQF 7) in Information Security, or a Senior Certificate (NQF 4).
• 8 to 10 years of IT security experience, or 15 years under the alternative route, including at least 4 years of people management.
• CISM, CISSP or an equivalent recognised information security management certification.
• Strong information security management experience, leadership and stakeholder management, and the ability to align security operations with organisational objectives and risk requirements.