Cloud & Cyber Security Manager

Are you a security minded information technology leader with a passion for protecting and scaling cloud environments? Join our Information Technology team as a
Cloud & Cyber Security Manager
in
Plattekloof
, where you’ll own Herotel’s cloud infrastructure on AWS and Azure, lead our cyber security and disaster recovery programmes, and drive IT governance, risk and compliance.
This role is perfect for a strategic, hands on leader who is comfortable presenting to Exco and the Audit Committee, loves building resilient systems and is excited to lead a team through ISO 27001 certification.
What you’ll do:
Set Herotel’s cloud strategy and roadmap across AWS and Azure, aligned to company strategy
Own the cloud architecture and governance framework, including identity and access standards, network segmentation, security baselines and guardrails
Set the annual cloud, cyber security and compliance budget with the CFO, manage spend against budget and drive cost optimisation
Manage cloud, security and compliance vendors and managed service providers, including contracts, SLAs and costs
Own the IT disaster recovery and business continuity strategy, including protected backups, ransomware recovery and an annual full DR test
Own Herotel’s cyber security strategy and control framework, and oversee security operations through the Cybersecurity Engineer
Act as the escalation and decision point for major security incidents, including executive communication
Sponsor Herotel’s ISO 27001 certification programme and chair the ISMS management review
Approve and own the IT, information security and AI policy frameworks, and maintain the IT risk register
Own the IT scope of the annual audit and make sure findings are remediated on time
Serve as Herotel’s Information Officer under POPIA and PAIA, overseeing compliance, data subject requests and security compromise notifications
Own the AI tool approval process, including security and POPIA review before use
Set the security standards that in house and outsourced software development must meet
Report on cyber risk, cloud and DR readiness to Exco and the Audit Committee, and lead, develop and coach your direct reports
What you’ll need:
A Bachelor’s Degree in Computer Science, Information Technology, Information Systems or a related field
At least 10 years’ experience in IT, including at least 5 years in cloud or cyber security and at least 5 years in a leadership role
Proven experience designing, securing and operating production environments on AWS and Azure
Hands on experience designing, implementing and testing disaster recovery and backup for cloud and on premises workloads, including ransomware recovery
Experience with ISO 27001
Experience managing cloud and security budgets, vendor contracts and managed service providers
Experience reporting to Exco, a board or audit committees
Experience in an ISP or telecommunications environment is strongly preferred
CISM, CISSP or CCSP will be beneficial
AWS Certified Solutions Architect Professional or AWS Certified Security Specialty will be beneficial
Microsoft Certified Azure Solutions Architect Expert or Cybersecurity Architect Expert will be beneficial
ISO 27001 Lead Implementer or Lead Auditor, or a business continuity certification such as DRI CBCP or ISO 22301 Lead Implementer, will be advantageous
Working knowledge of POPIA and PAIA, and exposure to NIST CSF, CIS Controls or King IV IT governance is advantageous
Strong knowledge of AWS and Azure security services, identity (Entra ID and AWS IAM) and modern security tooling such as SIEM, EDR, cloud security posture management and vulnerability management
Working knowledge of ITIL incident, change and problem management
Strong strategic thinking, decision making and the ability to see the bigger picture
Excellent communication and stakeholder management skills, with the ability to operate at all levels of the organisation
The ability to manage change, maintain a high level of confidentiality and work effectively under pressure in a fast paced environment
What we offer:
Exposure to a dynamic workplace
A chance to grow your skills through our internal academy
A friendly, team-driven environment
Group Risk Benefits
Medical Benefits
Health and Lifestyle Programmes
Important Disclaimer:
Please ensure that the information you provide in your application is true, accurate, and correct.
Preference will be given to candidates from Designated Groups, as defined by the Employment Equity Act and in line with Herotel’s Employment Equity Plan.
By submitting an application, you consent to the processing of your personal information in accordance with POPIA for recruitment purposes. For more details on how we handle personal information, please refer to our Privacy Policy on our
website
.
If you do not hear from us within 14 days, please consider your application unsuccessful.