Information Security Lead - Penetration Testing

Our client, a leading technology firm based in the vibrant city of Cape Town, Western Cape , is seeking an accomplished and strategic Information Security Lead to head their Penetration Testing and Vulnerability Management division. This pivotal role involves leading a team of security experts in identifying and mitigating security weaknesses across the organization's digital assets. The ideal candidate will possess extensive experience in offensive security, a deep understanding of attacker methodologies, and strong leadership capabilities.

This is an exciting opportunity to shape the security strategy and protect the critical infrastructure of a prominent company in Cape Town .

Lead and manage a team of penetration testers and vulnerability assessment specialists. Develop and execute comprehensive penetration testing plans, covering network, application, and cloud environments. Conduct in-depth vulnerability assessments and risk analysis to identify potential security threats. Design and implement robust vulnerability management programs to prioritize and remediate identified weaknesses. Stay current with the latest threat intelligence, attack vectors, and security vulnerabilities.

Develop and maintain security testing methodologies, tools, and processes. Collaborate with IT and development teams to provide actionable remediation guidance. Prepare detailed reports on testing findings, risks, and recommendations for senior management. Represent the security team in cross-functional projects and initiatives. Mentor and develop junior members of the security team, fostering a culture of continuous learning and improvement.

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field. Minimum of 8 years of progressive experience in information security, with at least 3 years in a leadership or team management role focusing on penetration testing. Demonstrated expertise in offensive security techniques, tools (e.g., Metasploit, Burp Suite, Nmap), and methodologies. Strong understanding of networking protocols, web application security, operating systems, and cloud security principles.

Experience with vulnerability management platforms and processes. Excellent analytical, problem-solving, and critical thinking skills. Outstanding communication and presentation abilities, with the capacity to explain complex technical issues to non-technical audiences. Relevant certifications such as OSCP, CEH, CISSP, or GIAC are highly desirable. Experience working within the Cape Town technology ecosystem is an advantage. Ability to manage multiple projects simultaneously and meet strict deadlines.

Our client offers a highly competitive salary package, including performance-based bonuses and potential equity options. Employees benefit from comprehensive medical and dental insurance, a generous retirement savings plan, and significant paid time off. Opportunities for advanced training, professional certifications, and attendance at leading cybersecurity conferences are provided. The company culture is dynamic and forward-thinking, encouraging innovation and collaboration. This role offers a significant career advancement opportunity within a leading firm in Western Cape , with a flexible Hybrid work arrangement.