Security Operations Lead

Closing Date
- 2024/09/23
- Reference Number
- SHO240909-5
- Job Title
- Security Operations Lead
- Job Type
- Permanent
- Location - Country
- South Africa
- Location - Province
- Western Cape
- Location - Town or City
- Brackenfell, Cape Town
- Purpose of the Job

The purpose of the Security Operations Lead role is to safeguard the organisation's information assets and efficiently handle any security incidents to mitigate their impact. This includes analysing and planning for remediation of discovered vulnerabilities, facilitating, tracking, and mitigation of vulnerability findings together with the cyber security team and stakeholders. This is a diverse and hands-on role that works across a range of cyber security initiatives, whilst leveraging experience in leadership, and in-depth knowledge on various technical aspects of vulnerability management. Furthermore, this role works closely with the broader IT teams, legal and compliance and key business representatives to ensure the enhancement of our cyber security landscape.
- Job Advert Details
- Job Category
- IT
- Job Objectives

Lead security incidents by overseeing detection, analysis, containment, eradication, and recovery.
Oversee the implementation of incident response plans and procedures to effectively address and mitigate potential threats.
Oversee the monitoring of networks and systems for security breaches.
Ensure the effective use of security information and event management (SIEM) tools.
Identify and mitigate potential security threats by conducting threat assessments and developing strategies to counteract them.
Manage vulnerability assessments and penetration testing to ensure the remediation of identified vulnerabilities.
Drive compliance with relevant cybersecurity regulations and standards by developing and enforcing security policies and procedures.
Manage team escalations on vulnerability issues with the relevant support teams (I.e., cloud provisioning teams, operations systems teams, database administration teams, etc.) in accordance with service level agreements.
Lead and mentor the cybersecurity operations team by providing training and development opportunities for team members.
Liase with stakeholders such as IT, legal, and Compliance, to enhance security posture.
Report on security incidents and risks to senior management and stakeholders.
Research and keep informed of the latest cybersecurity trends and technologies.
Define, develop, and optimise technical processes, standards, frameworks, and best practice to advise and ensure system vulnerability remediations to completion and to protect against emerging threats.
Drive overall team efficiency in analysing and understanding the technical scope and required remediation of all systems vulnerability concerns raised by the security report.
Drive the execution of systems vulnerability management strategy, processes, tools, and lifecycle management.
- Qualifications

Certified Information Systems Security Professional (CISSP).
Certified Information Security Manager (CISM).
Diploma/ Degree in Computer Science, Information Technology, Cybersecurity, or a related field.
- Experience

+5 years of experience in IT or cybersecurity roles.
+2 years’ experience in a team leadership capacity or similar with demonstrable experience leading and efficiently managing a team delivery or coordination of system vulnerability remediation activities to ensure a high performing and secure system engineering environment.
Experience with incident response, threat management, and security monitoring.
Experience with security tools and technologies such as SIEM, firewalls, IDS/IPS, and endpoint protection.
- Knowledge and Skills

Strong knowledge of system vulnerability system engineering and administration, including relevant tools.
Solid working knowledge of IT Service Management systems (BMC Helix, JIRA, Service Now etc.)
In-depth knowledge of cybersecurity frameworks, such as NIST, ISO/IEC 27001, and CIS Controls.
Proficiency with security tools and technologies.
Strong understanding of network protocols, operating systems, and databases.
Ability to analyse and interpret security data.
Strong leadership - a positive leader who serves the team and shows an appreciation for team morale and a healthy happy culture. Ability to build strong relationships with clients and colleagues; display a strong team spirit. Ensure that all individuals, team members, and stakeholders feel valued, motivated and equipped to deliver, develop and build a meaningful career.
Formulating processes and concepts - Works strategically to realise organisational goals; identifies, develops positive and compelling visions of the organisation’s future potential; takes account of a wide range of issues across, and related to the organisation.
Innovative and solution orientated - thinks outside of the box. Sound judgment, quick decision making and the ability to generate both short
- and long-term solutions that serve the flow of