Cyber Security Manager (JHB Illovo) at BDO South Africa

The purpose of the role:

The role of the Manager: Cybersecurity includes contribution to technical insights relevant to client engagements and internal projects. Actively establish, maintain and strengthen internal and external relationships.  Identify potential business opportunities for BDO within existing engagements and the market, execution and management of a team of specialists, senior consultants and consultants. Control engagement budget, WIP and manage debtors. The Manager: Cybersecurity will be responsible for the following key activities to achieve the main objectives:

• Managing Client Relationships
• Planning of cybersecurity, IT audit, licensing reviews and other specialised engagements
• Execution of Cybersecurity IT audit, licensing reviews and other specialised engagements 
• Managing the resources assigned to each project and control WIP
• Manage the day-to-day activities of any assignment (from planning, execution to reporting).
• Rolling out managed detection and response service to clients
• Manage team responsible for managed services  
• Performance management (Cyber Strategy and Planning, Testing and Verification, GRC, Security Risk Management and Incident Response, Cybersecurity Solutions)

Requirements:

To qualify for the role, you must have:

•  Minimum of  7 years experience (3 years in a management position)
•  Experience in assessing an implementing security and risk standards including ISO 2700X, NIST, ITIL, COBIT
•  Experience in security risk assessment and planning using different frameworks and tools
•  Experience in penetration testing on infrastructure, network, web applications, and source code review
•  Experience in cloud security benchmarking, risk assessment and cyber solutions
•  Manage security configurations reviews on operating systems, databases and network devices
•  Experience in cybersecurity awareness training, VAPT, MDR, SOC/SIEM, etc.
•  Bachelor's Degree in Computer Science, Information Systems, or related training in Information Security
•  Industry certification (e.g., CISA, CISM, CompTIA Security+, CEH, CISSP)