Snr Specialist IM Security Apps & Data

Valterra Platinum, formerly Anglo American Platinum, is a leading primary producer of platinum group metals (PGMs), with integrated mining, smelting, and refining operations in South Africa and Zimbabwe, marketing the metal we produce globally. Following our demerger from Anglo American plc, Valterra Platinum is now an independent, publicly listed company with a primary and secondary listing on the Johannesburg and London stock exchanges respectively.

As we embark on this exciting new chapter, Valterra Platinum is positioned to define and pursue its own strategy, anchored in operational excellence, sustainability, and value creation for the long-term. With full accountability for our performance and growth, we are focused on strengthening our capabilities across the entire PGM value chain, from mine to market.

Our independence empowers us to deepen our commitment to stakeholders and lead with purpose – to Unearth Value to Better Our World. We remain steadfast in our ambition to be the world’s foremost producer of platinum group metals, while embedding safety and sustainability in everything we do.

If you're driven by purpose and the opportunity to make a lasting impact, we invite you to join us. Apply today and be part of something bigger.

Number of positions: 01

Location: Corporate Office, Rosebank

This role is responsible for leading the establishing, maturing, and execution of the organisation’s application security capability and data security capability. The application security capability is focused on securing the software development lifecycle (SDLC), platform-as-a-services (PaaS) security lifecycle, and software-as-a-service (SaaS) security lifecycle for all existing and new applications and systems. The data security capability is focused on protecting the confidentiality and integrity of the organisation’s data assets.

This includes integrating driving data classification standards across cloud platforms, on-premise systems, and databases containing critical operational and business data.

Job responsibilities include (but are not limited to):

• Establish and take ownership of the cybersecurity capability for securing all business and enterprise applications and for protecting sensitive data across all business operations of the organisation.
• Design and establish a secure software development lifecycle (SSDLC) that integrates security testing tools and processes into the existing development (Dev Ops/Dev Sec Ops ) workflows.
• Perform security architecture and design reviews for new and existing applications, focusing on threat modelling, data flows, and secure component design.
• Ensure application development and deployment practices adhere to relevant regulatory and internal compliance requirements.
• Develop and deliver engaging security training and guidance to developers, engineers, and QA teams to foster a security-first culture.
• Coordinate and manage external and internal application penetration tests, tracking and validating the remediation of all identified findings.
• Design, establish and enforce a company-wide data classification framework and integrate it with security tools and business processes.
• Lead the deployment, configuration, and continuous tuning of data loss prevention (DLP) systems and other data protection tools.
• Lead the monitoring of DLP and data security alerts, investigate potential data leakage incidents, and coordinate with incident response teams for effective containment and resolution.
• Conduct regular data flow analysis to identify unauthorised storage, processing, or transmission of sensitive data.
• Work closely with Legal, Compliance, Procurement, and IM teams to ensure data handling and protection practices comply with relevant regulations (e.g., POPIA, GDPR, local privacy laws) and contractual obligations.
• Create and maintain security policies, standards, baselines, and procedures related to application security and data security, ensuring compliance with relevant regulations (e.g. POPIA, GDPR), zero-trust principles, best practices and internal governance frameworks.
• Act as the primary point of contact for internal and external audits concerning controls…