Cyber Security Vulnerability Lead

1 week ago


Cape Town, Western Cape, South Africa Santam Full time
About the Role

We are seeking an experienced Cyber Security Vulnerability Lead to join our Business Information and Technology Services (BITS) department. This senior role will be responsible for leading the development and implementation of a comprehensive technical compliance program based on relevant industry standards and regulations.

Key Responsibilities
  • Receive weekly Qualys scans of IT systems, networks, and applications for internal and external vulnerabilities uploaded to the QlikView reporting system.
  • Prioritise the vulnerabilities from most critical to least threatening.
  • Conduct weekly meetings with accountable departments to highlight, prioritise and solution their vulnerabilities.
  • Design a process for the departments to accept responsibility and commit to a timeline in which they will resolve and fix the vulnerability.
  • Keep track of commitments and escalate to senior management as required.
  • Promote these vulnerabilities to risks in the Cura system should the outstanding time reach the threshold.
  • Develop and implement a comprehensive technical compliance program based on relevant industry standards and regulations.
  • Ensure alignment with frameworks such as ISO 27001, NIST, GDPR, HIPAA, or other applicable standards depending on the industry.
  • Conduct regular compliance audits and assessments to verify adherence to established technical standards and policies.
  • Provide guidance to cross-functional teams on compliance requirements and assist in the resolution of compliance-related issues.
  • Coordinate and oversee the deployment of security patches and updates to address vulnerabilities promptly. This is done in conjunction with infrastructure management and our service provider.
  • Establish and maintain a structured process for patch management, ensuring minimal disruption to ongoing operations.
  • Support the implementation of patch management using tools implemented by our services providers.
  • Collaborate with the incident response team to develop and enhance incident response plans related to vulnerabilities.
  • Participate in the investigation and resolution of security incidents related to vulnerabilities.
  • Maintain detailed records of vulnerabilities, assessments, and compliance activities.
  • Generate and present regular reports on the status of vulnerabilities, compliance posture, and remediation progress to key stakeholders.
  • Conduct training sessions to educate employees on security best practices and compliance requirements.
  • Foster a culture of security awareness and compliance throughout the organization.
  • Evaluate and enhance security and compliance processes continually.
  • Stay abreast of emerging technologies and industry trends to recommend and implement improvements to the organization's security posture.
Qualifications and Experience
  • Bachelor's degree in information security, Computer Science, or a related field.
  • Professional certifications such as CISSP, CISM, or equivalent.
  • 5 years of experience in vulnerability management, technical compliance, and information security.
  • 5 years of strong knowledge of security frameworks, standards, and regulations.
  • Familiarity with security technologies and tools, including vulnerability scanning tools.
  • Excellent communication and collaboration skills.
  • Ability to work effectively in a dynamic and fast-paced environment.
About Santam

Santam is the leading short-term insurer in South Africa. Along with its subsidiaries, the business transacts all classes of short-term insurance. We are a large, diversified, and transforming company, and our success is rooted in our passion for our clients. Everything we do is centered on our delivery of Insurance Good and Proper.

Salary Range

R1,200,000 - R1,500,000 per annum, depending on experience and qualifications.



  • Cape Town, Western Cape, South Africa Santam Full time

    Career OpportunitySantam is seeking a highly skilled Cyber Security Vulnerability Manager to join our Business Information and Technology Services (BITS) department. This senior role will be based in the Western Cape or Gauteng and will be responsible for leading our vulnerability management program.Key ResponsibilitiesLead the receipt and prioritization of...


  • Cape Town, Western Cape, South Africa Santam Full time

    Career OpportunitySantam BITS is seeking a senior role as Cyber Security Vulnerability and Technical Compliance Manager in the Business Information and Technology Services (BITS) department, based in the Western Cape or Gauteng.Job ResponsibilitiesReview weekly Qualys scans of IT systems, networks, and applications for internal and external vulnerabilities...


  • Cape Town, Western Cape, South Africa Hire Resolve Full time

    Cyber Security Engineer RoleHire Resolve is seeking a highly skilled Cyber Security Engineer to join our client, a leading independent power producer. This is an exceptional opportunity to contribute to a dynamic and innovative company at the forefront of the energy sector.Key ResponsibilitiesCollaborate with energy engineers, system operators, and IT teams...


  • Cape Town, Western Cape, South Africa Acuity Consultants Full time

    Acuity Consultants seeks a seasoned Cyber Security Operations Expert to join our Financial Services group in Cape Town. This R600K per year, hybrid role offers the opportunity to enhance Data Leakage Prevention and lead Cyber Security Operations services.The ideal candidate will have 3-5 years of hands-on experience with Network operations, Operating System...


  • Cape Town, Western Cape, South Africa Parvana Full time

    About Parvana: Our company is a leading international software development house specializing in telecommunications and payment gateways. With a proven track record of success and remarkable growth, we offer an exceptional training and mentorship program. Our team is comprised of Agile enthusiasts, highly qualified professionals with a shared goal of...


  • Cape Town, Western Cape, South Africa RareCruit Full time

    RareCruit is seeking a highly skilled Cyber Engineer to join our Cyber Security Department. The ideal candidate will have a strong background in cybersecurity and experience working with complex systems. Key responsibilities include: * Developing and implementing cybersecurity strategies to protect our systems and data * Conducting threat assessments and...


  • Cape Town, Western Cape, South Africa Surgo PTY Ltd Full time

    Job OverviewWe are seeking a highly motivated and enthusiastic Cyber Security Technician to join our Cybersecurity division. This role will draw upon your knowledge of Microsoft and Linux systems, as well as Networking and Cybersecurity technologies.About the RoleThis is an excellent opportunity for a driven individual wanting to start their cyber security...


  • Cape Town, Western Cape, South Africa Parvana Full time

    About Our Client: Parvana is a renowned international software development house specialising in telecommunications and payment gateways. With a proven track record of remarkable growth, they offer an exceptional training and mentorship program. What You Will Be Doing: As a Cyber Security Architect, you will be responsible for developing and maintaining...


  • Cape Town, Western Cape, South Africa Acuity Consultants Full time

    Job DescriptionRole OverviewAs a Cyber Security Operations Specialist, you will be responsible for managing Cyber Security Operations services, configuring, and monitoring critical security infrastructure for a leading Financial Services group in Cape Town.The ClientOur client is a Financial Services group operating across several segments of the financial...


  • Cape Town, Western Cape, South Africa DLK Group Full time

    Job SummaryThe DLK Group is seeking a highly skilled Cyber Security Specialist to join our team. As a Cyber Security Specialist, you will be responsible for the implementation, configuration, and management of our network security infrastructure, including Cisco Firepower Next-Generation Intrusion Prevention Systems, ASA, and Security Identity Management.Key...


  • Cape Town, Western Cape, South Africa Collinson Full time

    Cyber Security Threat AnalystAt Collinson, we are looking for a skilled Cyber Security Threat Analyst to join our team. This role will be responsible for monitoring, analyzing, and responding to cyber threats and incidents that affect our network and systems. You will also co-ordinate vulnerability assessments, penetration tests, to identify and mitigate...


  • Cape Town, Western Cape, South Africa Hire Resolve Full time

    Hire Resolve is seeking a Senior Cyber Security Specialist to lead the protection of our clients' IT infrastructure and applications from cyber threats. This crucial role involves ensuring compliance with industry standards and collaborating with various teams to develop robust security solutions.Key ResponsibilitiesDesign, implement, and manage security...


  • Cape Town, Western Cape, South Africa Parvana Full time

    At Parvana, we are seeking a highly skilled Cyber Security Architectural Strategist to join our team. This is a challenging role that requires the ability to design and implement security architectures aligned with business goals and regulatory requirements.About Our CompanyParvana is a leading software development house specializing in telecommunications...


  • Cape Town, Western Cape, South Africa Pro development Group Full time

    Job Title: Cyber Security EngineerWe are seeking a highly skilled Cyber Security Engineer to join our team at Pro Development Group. As a key member of our team, you will be responsible for designing and implementing secure cloud infrastructure solutions that meet the highest standards of security and compliance.Key Responsibilities:Design and implement...


  • Cape Town, Western Cape, South Africa Acuity Consultants Full time

    Job OverviewWe are seeking a skilled Cyber Security Operations Specialist to join our team at Acuity Consultants.About the RoleThis exciting opportunity involves managing Cyber Security Operations services and enhancing Data Leakage Prevention for a leading Financial Services group based in Cape Town. The ideal candidate will have hands-on technical...


  • Cape Town, Western Cape, South Africa ADEC Innovations Full time

    Cyber Security Practice LeaderADEC Innovations is seeking a seasoned Cyber Security Practice Leader to drive the growth and success of our Cyber Security practice. As a key member of our leadership team, you will be responsible for developing and executing a comprehensive strategy to build and maintain a world-class Cyber Security practice.Key...


  • Cape Town, Western Cape, South Africa ADEC Innovations Full time

    Lead Cyber Security PracticeADEC Innovations is seeking a seasoned Cyber Security Practice Leader to spearhead the development and growth of our global information security and cyber security capabilities.About the RoleDevelop and execute a strategic plan to establish ADEC Innovations as a leading provider of cyber security services and solutions.Leverage...


  • Cape Town, Western Cape, South Africa Acuity Consultants Full time

    About the RoleWe are seeking a highly skilled Senior Cyber Security Specialist to join our team at Acuity Consultants in Cape Town. This is a hybrid opportunity that offers a competitive salary of R600,000 per annum.Job SummaryThe successful candidate will be responsible for managing Cyber Security Operations services and playing a key role in enhancing Data...


  • Cape Town, Western Cape, South Africa RareCruit Full time

    About the Role:The Cyber Engineer will work in the Cyber Security Department, focussing on advanced threat detection and response systems.Key Responsibilities:Design and develop secure network architecturesImplement robust threat detection and mitigation strategiesCollaborate with cross-functional teams to drive security initiativesAnalyse and respond to...


  • Cape Town, Western Cape, South Africa Acuity Consultants Full time

    Company OverviewAcuity Consultants is a leading firm providing expert cybersecurity services to the financial sector.SalaryR600,000 per annum in a hybrid work arrangement.Job DescriptionWe are seeking an experienced Cyber Security Operations Specialist to manage our clients' cyber security operations and play a key role in enhancing data leakage prevention...