Gauteng: Security Engineer posted by Network Finance

• Establish and maintain cybersecurity standards, controls and compliance frameworks (SOC2, HiTrust, PCI DSS).
• Monitor security operations, controls and regulatory alignment across the business.
• Perform security design reviews, vulnerability scanning, penetration testing and remediation.
• Own security tooling lifecycle (selection, implementation, maintenance).
• Lead audit readiness and external engagements for cybersecurity certifications.

Infrastructure & Security Operations

• Securely plan, deploy and maintain IT and cloud infrastructure with a cybersecurity focus.
• Implement and mature processes for threat detection, prevention and incident response.
• Define and enforce infrastructure and software security standards with Dev, IT and DevOps.
• Lead disaster recovery and crisis communication processes.
• Manage vendors and collaborate across teams to maintain secure environments.

Risk, Compliance & Governance

• Identify, assess and mitigate cybersecurity and privacy risks across products and services.
• Improve automation of security controls and secure SDLC processes.
• Drive remediation of audit and risk findings, ensuring non-recurrence.
• Manage internal/external security audits and maintain risk documentation.

Documentation & QMS

• Own the cybersecurity roadmap, evidence packs, audit calendar and reporting.
• Maintain centralised documentation of security assets, controls and test outcomes.
• Approve and store penetration test and vulnerability scan outcomes with remediation tracking.
• Ensure documentation meets certification and customer-audit requirements.

Job experience and Skills Required:

• AWS Well Architected Framework
• Trusted Advisor
• GuardDuty / SCP / SSM / IAM / WAF
• Container services such as ECS/EKS
• Incident detection and response management.
• Performing penetration tests and vulnerability scans against networks and infrastructure, applications and AWS environments.
• Drafting and implementing security policies, security procedures, security design and implementation

Apply now!
For more exciting IT vacancies, please visit: www.********.co.za
 
I also specialise in recruiting in the following:

• Software Developer
• Business Analyst
• CyberSecurity
• Test Analysts
• Infrastructure

If you have not had any response in two weeks, please consider the vacancy application unsuccessful. Your profile will be kept on our database for any other suitable roles / positions.

For more information, contact:
Shanita Chanka
IT Recruitment Specialist
Connect with me on LinkedIn – www.********.co.za