Gauteng: Information Security Manager (JB5838) posted by Kontak Recruitment

About the Role

Kontak Recruitment is seeking an experienced Information Security Manager to lead cybersecurity strategy, governance, and operations across a hybrid on-prem and cloud environment for our client, a South African-based financial services organisation. The successful candidate will have full accountability for security architecture, SOC oversight, Microsoft security platforms, regulatory compliance, and risk management, while working closely with IT leadership and executive stakeholders.

Key Responsibilities

• Define and maintain enterprise-wide cybersecurity strategy aligned with business and regulatory requirements.
• Establish and enforce security policies, standards, and governance frameworks.
• Ensure alignment with NIST Cybersecurity Framework and Joint Security Standards.
• Monitor emerging threats, regulatory changes, and industry best practice.
• Design secure solutions across hybrid infrastructure, including Azure and on-prem environments.
• Integrate security into infrastructure and application initiatives.
• Manage identity and access controls, including Azure AD, MFA, and privileged access.
• Oversee day-to-day security monitoring, incident response, and threat intelligence.
• Manage Microsoft security platforms, including Defender, Sentinel, Purview, and Conditional Access.
• Oversee 24/7 SOC operations, including incident playbooks, escalation, and KPIs (MTTD, MTTR).
• Conduct risk assessments, vulnerability management, and penetration testing.
• Ensure compliance with POPIA, GDPR, NIST CSF, JSS, and related standards.
• Maintain risk registers and manage audit remediation activities.
• Define and enforce BYOD security controls, including MDM and DLP.
• Secure branch and remote networks using firewalls, VPNs, and segmentation.
• Manage the cybersecurity budget, licensing, tools, and vendors.
• Track ROI and risk mitigation outcomes.
• Lead and develop a cybersecurity team across operations, engineering, and compliance.
• Drive organisation-wide security awareness and training initiatives.
• Provide executive-level reporting on security posture and risk exposure.

Requirements

• Bachelor’s degree in IT, Computer Science, or related field (or equivalent experience)
• 8 years IT Security experience, with at least 5 years in a leadership role
• Strong experience in hybrid cloud security environments
• Deep knowledge of Microsoft 365 E3/E5 security stack
• Proven experience managing SOC operations, SIEM, SOAR, and threat intelligence
• Experience with BYOD security and distributed branch environments

Qualifications

• Certifications (highly advantageous): CISSP or CISM
• Microsoft Certified: Cybersecurity Architect Expert
• GIAC Security Operations or similar

Salary & Benefits

Salary: XXX-XXXX per annum