Key Responsibilities

1. Security Architecture & Engineering

• Design and implement advanced security controls across on-prem, cloud, and SaaS environments (Azure, Microsoft 365).
  

• Define and enforce security architecture standards.
  

• Lead secure SDLC initiatives and application security assessments.
  

• Configure and maintain enterprise firewalls and Web Application Firewalls (WAF).
  

2. Security Operations Leadership

• Oversee and optimize security platforms (Firewalls, SIEM, EDR, DLP, Vulnerability Management).
  

• Develop automation for threat detection and response integrated with ITSM tools.
  

• Define operational playbooks and mentor junior engineers.
  

• Manage and govern outsourced SOC services, SLAs, and performance metrics.
  

3. Incident Response & Threat Management

• Lead major incident investigations, forensic analysis, and root cause analysis.
  

• Act as escalation point for critical security incidents.
  

• Drive proactive threat hunting initiatives.
  

4. Vulnerability & Patch Management

• Define vulnerability management strategy.
  

• Ensure timely remediation of critical risks.
  

• Deliver executive-level risk and remediation reporting.
  

5. Identity & Access Management

• Architect enterprise identity governance using Microsoft Entra ID (Azure AD).
  

• Implement privileged access management and Zero Trust principles.
  

6. Security Awareness

• Design and deliver enterprise-wide security awareness programs.
  

• Measure effectiveness and report outcomes to leadership.
  

7. Compliance & Risk Advisory

• Ensure alignment with ISO 27001, NIST CSF, CIS Benchmarks, POPIA, GDPR, FSCA.
  

• Lead technical audits, penetration tests, and red/blue team exercises.
  

8. Reporting & Executive Engagement

• Deliver security dashboards, metrics, and board-level reporting.
  

• Recommend and track continuous security posture improvements.
  

• Produce detailed firewall and WAF configuration and performance reports.
  

Qualifications & Experience

Education & Certifications

• Diploma or Bachelor’s Degree in IT, Computer Science, or related field.
  

• CISSP, CISM, or equivalent senior-level certification.
  

• Microsoft Cybersecurity Architect Expert or SC-series certification