Cloud & Cyber Security Manager

Are you a security minded information technology leader with a passion for protecting and scaling cloud environments? Join our Information Technology team as a Cloud & Cyber Security Manager in Plattekloof, where you’ll own Herotel’s cloud infrastructure on AWS and Azure, lead our cyber security and disaster recovery programmes, and drive IT governance, risk and compliance.

This role is perfect for a strategic, hands on leader who is comfortable presenting to Exco and the Audit Committee, loves building resilient systems and is excited to lead a team through ISO 27001 certification.

What you’ll do:

• Set Herotel’s cloud strategy and roadmap across AWS and Azure, aligned to company strategy
• Own the cloud architecture and governance framework, including identity and access standards, network segmentation, security baselines and guardrails
• Set the annual cloud, cyber security and compliance budget with the CFO, manage spend against budget and drive cost optimisation
• Manage cloud, security and compliance vendors and managed service providers, including contracts, SLAs and costs
• Own the IT disaster recovery and business continuity strategy, including protected backups, ransomware recovery and an annual full DR test
• Own Herotel’s cyber security strategy and control framework, and oversee security operations through the Cybersecurity Engineer
• Act as the escalation and decision point for major security incidents, including executive communication
• Sponsor Herotel’s ISO 27001 certification programme and chair the ISMS management review
• Approve and own the IT, information security and AI policy frameworks, and maintain the IT risk register
• Own the IT scope of the annual audit and make sure findings are remediated on time
• Serve as Herotel’s Information Officer under POPIA and PAIA, overseeing compliance, data subject requests and security compromise notifications
• Own the AI tool approval process, including security and POPIA review before use
• Set the security standards that in house and outsourced software development must meet
• Report on cyber risk, cloud and DR readiness to Exco and the Audit Committee, and lead, develop and coach your direct reports

What you’ll need:

• A Bachelor’s Degree in Computer Science, Information Technology, Information Systems or a related field
• At least 10 years’ experience in IT, including at least 5 years in cloud or cyber security and at least 5 years in a leadership role
• Proven experience designing, securing and operating production environments on AWS and Azure
• Hands on experience designing, implementing and testing disaster recovery and backup for cloud and on premises workloads, including ransomware recovery
• Experience with ISO 27001
• Experience managing cloud and security budgets, vendor contracts and managed service providers
• Experience reporting to Exco, a board or audit committees
• Experience in an ISP or telecommunications environment is strongly preferred
• CISM, CISSP or CCSP will be beneficial
• AWS Certified Solutions Architect Professional or AWS Certified Security Specialty will be beneficial
• Microsoft Certified Azure Solutions Architect Expert or Cybersecurity Architect Expert will be beneficial
• ISO 27001 Lead Implementer or Lead Auditor, or a business continuity certification such as DRI CBCP or ISO 22301 Lead Implementer, will be advantageous
• Working knowledge of POPIA and PAIA, and exposure to NIST CSF, CIS Controls or King IV IT governance is advantageous
• Strong knowledge of AWS and Azure security services, identity (Entra ID and AWS IAM) and modern security tooling such as SIEM, EDR, cloud security posture management and vulnerability management
• Working knowledge of ITIL incident, change and problem management
• Strong strategic thinking, decision making and the ability to see the bigger picture
• Excellent communication and stakeholder management skills, with the ability to operate at all levels of the organisation
• The ability to manage change, maintain a high level of confidentiality and work effectively under pressure in a fast paced environment

What we offer:

• Exposure to a dynamic workplace
• A chance to grow your skills through our internal academy
• A friendly, team-driven environment
• Group Risk Benefits
• Medical Benefits
• Health and Lifestyle Programmes

Important Disclaimer:

• Please ensure that the information you provide in your application is true, accurate, and correct.
• Preference will be given to candidates from Designated Groups, as defined by the Employment Equity Act and in line with Herotel’s Employment Equity Plan.
• By submitting an application, you consent to the processing of your personal information in accordance with POPIA for recruitment purposes. For more details on how we handle personal information, please refer to our Privacy Policy on our website.
• If you do not hear from us within 14 days, please consider your application unsuccessful.