Principal Specialist Cyber Security

At Cell C, we are not just a telecommunications company; we are a people-centric and consumer-focused organization committed to delivering exceptional experiences to our customers. In line with our dedication to customer-centricity, we are seeking a seasoned professional
Principal Specialist: Cyber Security
to join our dynamic team of #Unstoppables.

Purpose of the Job:

The Principal Cyber Security Specialist reports directly to the Chief Information Security Officer (CISO) and acts as the second-in-command (2IC) in driving and executing the organization's cybersecurity strategy.

This role combines deep technical expertise, strategic execution, and operational oversight, ensuring that the CISO's vision is effectively implemented across all cybersecurity domains. The Principal Specialist provides leadership across security operations, threat intelligence, architecture, and incident response — while maintaining a strong hands-on role in technical design, analysis, and defence operations.

The position also involves oversight of key cybersecurity functions, mentoring of technical teams, and coordination with partners, third parties, and CISOs from allied organizations to enhance the organization's collective resilience and security maturity.

Main Responsibilities:

Strategic Delivery & Management Oversight

• Serve as the primary deputy (2IC) to the CISO, ensuring the successful delivery of the CISO's cybersecurity strategy and roadmap
• Translate strategic objectives into executable technical and operational initiatives across all cybersecurity functions
• Oversee daily execution of security programs, ensuring goals, SLAs, and deliverables are met across security operations, architecture, risk, and compliance
• Act as the CISO's delegate in leadership meetings, providing technical and operational updates, and ensuring alignment with enterprise goals
• Track program performance, report on security metrics, and escalate emerging risks or gaps to the CISO

Cyber Security Architecture & Engineering

• Lead the design and continuous improvement of security architectures across network, cloud, and enterprise environments
• Define and implement secure configurations, system hardening guidelines, and advanced defence-in-depth strategies
• Evaluate, integrate, and optimize core security technologies including SIEM, EDR/XDR, SOAR, and IAM solutions
• Drive automation initiatives to improve detection, response, and operational efficiency
• Partner with IT, Network, and Engineering teams to embed security into design and development cycles

Incident Response & Forensic Analysis

• Act as the lead technical escalation point for complex or high-impact security incidents
• Coordinate response activities across internal and external teams to ensure rapid containment and remediation
• Lead forensic investigations, evidence analysis, and root cause determination
• Review and refine incident response playbooks and detection workflows to improve response maturity
• Deliver incident post-mortems to executive stakeholders with actionable improvement plans

Risk, Vulnerability & Assurance

• Lead vulnerability management and penetration testing efforts across critical systems and applications
• Correlate technical vulnerabilities with threat intelligence to prioritize risk-based remediation.
• Ensure alignment with regulatory and compliance frameworks (e.g., ISO 27001, NIST, POPIA)
• Contribute to audit readiness and support CISO reporting to internal and external auditors
• Monitor the effectiveness of security controls and recommend enhancements based on risk exposure

Team Leadership & Functional Oversight

• Provide technical and operational oversight to cybersecurity teams, ensuring cohesive execution of objectives
• Mentor and develop security engineers, analysts, and specialists to build advanced technical and analytical capabilities
• Coordinate with team leads across SOC, architecture, and governance functions to ensure alignment with the CISO's direction
• Promote a collaborative, high-performance culture focused on operational excellence and continuous learning

Partner, Vendor & External Engagement

• Act as the technical liaison and representative of the CISO in engagements with cybersecurity vendors, MSSPs, and technology partners
• Oversee third-party performance, ensuring service quality, SLA adherence, and risk management compliance
• Engage with CISOs and senior security leaders in partner organizations to exchange threat intelligence, coordinate response efforts, and strengthen collective defence
• Represent the organization in industry forums, regulatory consultations, and cyber defence working groups

Research, Innovation & Continuous Improvement

• Stay abreast of evolving cyber threats, adversary tactics, and emerging defence technologies
• Lead proof-of-concept initiatives for innovative security solutions, automation tools, and analytics platforms
• Drive maturity in threat detection, analytics, and response through continuous tuning and capability uplift
• Contribute to developing future-state security architecture and strategic initiatives led by the CISO

Qualification

• Bachelor's or master's degree in cyber security, Computer Science, or Information Technology

Preferred Certifications

• Certified Information Systems Security Professional (CISSP)
• Certified Cloud Security Professional (CCSP)
• Certified Ethical Hacker (CEH)
• ISO 27001 Lead Implementer or Auditor
• Telecom-specific or cloud security certifications (e.g., Azure, AWS Security Specialty)

Experience

• 10+ years of experience in cybersecurity, with 5+ years in senior technical or specialist roles
• Proven experience in cyber defence, incident response, and security architecture
• Experience supporting or deputizing for a CISO in technical or operational functions
• Exposure to telecom or large enterprise environments (preferred)
• Successful delivery of CISO's cybersecurity strategy and roadmap
• Reduction in Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR) for incidents
• Improvement in detection coverage, automation, and operational efficiency
• Quality and timeliness of intelligence and incident reporting to leadership
• Technical uplift and skill progression across cybersecurity teams
• Strong partner engagement and collaboration metrics (internal and external)
• Demonstrated improvement in overall cybersecurity maturity posture

"Cell C is an equal opportunities employer, committed to fostering a diverse and inclusive workplace where all employees are treated fairly and with respect, regardless of race, gender, age, disability, or any other protected characteristic."