Manager: Cyber Security Operations Centre (CSOC) at The South African Revenue Service (SARS)

Job Purpose

• To lead and manage the Cyber Security Operations Centre (CSOC) and User Access Management (UAM) functions, ensuring the effective monitoring, detection, investigation and response to cyber threats, while strengthening identity and access management, operational resilience and the protection of SARS information assets, systems and services.

Education and Experience

Minimum Qualification & Experience Required

• Bachelor's Degree / Advanced Diploma (NQF 7) Information Security AND 8-10 years' experience in an Information Technology Security, of which 3-4 years at a junior management level, as well as a recognised professional certification in Information Security Management, such as Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP), or an equivalent recognised certification.

Alternative #

• Senior Certificate (NQF 4) AND 15 years Information Technology Security experience, of which 3 - 4 years at a junior management level, , as well as a recognised professional certification in Information Security Management, such as Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP), or an equivalent recognised certification.

Job Outputs:

Process

• Act as the bottom-line drivers of tactical implementation within the context of business unit excellence and performance improvement.
• Direct, control, coordinate and optimise budgeted resources to meet specific objectives and deliver agreed results and productivity requirements.
• Ensure the development and implementation of a practice in alignment with operational policy and procedural frameworks.
• Implement tactical strategy and delivery plans through the development of operational activities, ensuring the achievement of operational targets.
• Convert the approved tactical security strategy into a measurable operational plan, defining deliverables, performance measures, priorities and resource requirements.
• Plan for handling work outputs, pull together interdependent activities and specify priorities, standards and procedures to ensure tactical implementation.
• Provide periodic reports on performance against plan & progress on short-term initiatives & use to realign tactical plan and objectives appropriately.
• Recommend changes to optimise processes, systems, policies and procedures, and execute the implementation of change and innovation initiated by the organisation.
• Timeously communicate top-down policy modification, objective achievement progress and critical success factors to impacted stakeholders.
• Use the insights gained through integrated business reports to measure success and realign tactical strategy implementation objectives appropriately.
• Plan and manage projects in area of accountability.
• Provide integrated oversight and operational management of Security Operations Centre (SOC) and User Access Management functions to ensure effective protection of SARS information assets and services.
• Monitor the effectiveness of security controls, operational performance, service delivery standards, risks and compliance requirements, and implement corrective actions where deficiencies are identified.
• Provide technical direction for the development, design and integration of systems to prevent the loss of SARS assets.
• Liaise with vendors to get product and service level issues resolved.

Governance

• Implement governance, risk and compliance policy in own practice area to identify and manage governance and risk exposure liability.
• Manage and or advise on the translation and application of policy in a specific functional area.
• Comply with organisational internal control and governance standards in finance and procurement processes.

People

• Develop and implement appropriate people capacity plans in line with delivery and efficiency targets, on budget and in partnership with specialised area.
• Plan and implement enhanced organisational efficiency by identifying and addressing development requirements and providing tools for people resources.
• Translate performance expectations into specific metrics and goals to identify and provide effective services, solve problems and achieve objectives.
• Ensure compliance with applicable health, safety, security and workplace policies within the Cyber Security Operations Centre environment

Finance

• Draw up a budget aligned to tactical delivery plans, monitor planned vs. actual, minimise expenditure and report on cost efficiency.
• Implement and monitor financial control, management of costs and corporate governance in area of accountability.

Client

• Build strong relationships and implement service level agreements that promote SARS with internal and external stakeholders.
• Develop and ensure implementation of practices which builds service delivery excellence and encourage others to provide exceptional client service.
• Manage an integrated service excellence culture, which builds rewarding relationships and provides opportunity for feedback and exceptional service

Deadline:11th October,2026