Group Information Security Consultant

Group Information Security Consultant | GRC & Security Operations

Cape Town or Johannesburg | Permanent | Flexible hybrid working

Smart4

Energy is recruiting an Information Security Consultant for an international services organisation with operations across multiple countries.

This opportunity combines practical IT security with governance, risk and compliance. Working closely with the Head of Information Security and operational IT teams, you will help maintain effective security controls, strengthen compliance and support secure, reliable services across the group.

• Maintain and improve information security policies, standards, procedures and controls.
• Support firewall administration, change management and security logging.
• Help maintain endpoint protection, vulnerability management, security monitoring and patching processes.
• Investigate security-related incidents and coordinate remediation with IT teams.
• Conduct internal compliance checks and support audit readiness and evidence gathering.
• Support information security management, payment-card security and data-protection requirements.
• Assess applications and technology changes against security requirements.
• Report on security risks, controls and performance metrics.
• Contribute to business continuity and disaster recovery planning.
• Work with international stakeholders, local IT teams and technology vendors.

• Relevant tertiary qualification or equivalent practical experience.
• Ideally five years' relevant information security experience. Candidates with strong transferable experience will also be considered.
• Hands-on experience across enterprise security controls, including firewalls, endpoint protection, vulnerability management and patching.
• Working knowledge of security monitoring or SIEM tools and incident management.
• Understanding of information security governance, risk, policies and compliance.
• Strong analytical, documentation and stakeholder communication skills.
• Willingness to provide occasional support outside normal working hours for incidents or projects.

• Fortinet or Palo Alto firewalls.
• Cortex XDR, Rapid7 or equivalent enterprise security tools.
• PCI DSS, GDPR, ISO-aligned information security management or IT auditing.
• CISM, CISA, CCNA, CCNP or other relevant security/networking certifications.
• ITIL, network-analysis tools or international business exposure.

You do not need experience with every product listed. Practical security capability and the ability to apply sound controls are more important than an exact technology match.

• A permanent group-level role with international exposure.
• Flexible hybrid working for candidates based in Cape Town or Johannesburg; attendance arrangements will be discussed during the process.
• A fixed cost-to-company package with flexibility in benefit allocation, subject to company policy.
• A discretionary annual bonus.