Snr Specialist IM Security Arch.& Eng

Valterra Platinum, formerly Anglo American Platinum, is a leading primary producer of platinum group metals (PGMs), with integrated mining, smelting, and refining operations in South Africa and Zimbabwe, marketing the metal we produce globally. Following our demerger from Anglo American plc, Valterra Platinum is now an independent, publicly listed company with a primary and secondary listing on the Johannesburg and London stock exchanges respectively.

As we embark on this exciting new chapter, Valterra Platinum is positioned to define and pursue its own strategy, anchored in operational excellence, sustainability, and value creation for the long‑term. With full accountability for our performance and growth, we are focused on strengthening our capabilities across the entire PGM value chain, from mine to market.

Our independence empowers us to deepen our commitment to stakeholders and lead with purpose – to Unearth Value to Better Our World. We remain steadfast in our ambition to be the world’s foremost producer of platinum group metals, while embedding safety and sustainability in everything we do.

If you're driven by purpose and the opportunity to make a lasting impact, we invite you to join us. Apply today and be part of something bigger.

Number of positions: 01

Location: Corporate Office, Rosebank

This role is responsible for designing, implementing, and maintaining a comprehensive cybersecurity architecture that is based on zero‑trust principles, aligns with Valterra Platinum’s business objectives, aligns with the information management (IM) product and platform strategy, applies cybersecurity industry standards/frameworks, and incorporates the evolving cyber‑threat landscapes. This role ensures a unified architecture design across cloud security, identity security, device security, application security, data security, IT/OT security, and managed SOC – leading to an integrated enterprise security (zero‑trust) architecture blueprint.

Job responsibilities include (but are not limited to):

• Define, develop, and maintain enterprise‑wide security architecture aligned with Zero Trust principles across identity, device, application, data, network (IT/OT), and hybrid multi‑cloud environments.
• Develop and maintain high‑level and low‑level security architecture blueprints, reference models, and reusable design patterns.
• Ensure security architecture aligns with IM strategy, cybersecurity strategy, digital transformation initiatives, and complies to regulatory requirements.
• Conduct security architecture reviews of new and existing systems, identifying gaps and recommending improvements.
• Validate infrastructure, cloud, and application architectures against security best practices and organizational standards.
• Participate in architecture review boards and security/IT governance forums to ensure security is embedded in all technology decisions.
• Develop and maintain security architecture roadmaps to address identified risks and maturity gaps.
• Create and manage detailed architecture diagrams, technical documentation, and design artefacts in a centralized repository.
• Research, evaluate, and recommend cybersecurity technologies and solutions to address current and emerging threats.
• Lead or support the design and implementation of security controls, tools, and platforms across the enterprise.
• Monitor evolving threat landscapes and digital business changes to ensure proactive adaptation of security architecture.

• Grade 12
• An undergraduate qualification (Bachelor’s degree/Diploma or equivalent) in Computer Science, Information Technology/Systems, Cybersecurity, Artificial Intelligence, Cloud Computing or related field.
• It would be advantageous to have a postgraduate qualification in the related IM discipline OR a proven track record of extensive practical experience in a role and context of similar complexity.
• Valid EB/Code 08 driver’s license
• Industry Certificates:
• Security Certification (e.g., CISSP, CISM, CISA, CCZT) and/or
• Enterprise Security Architecture Certifications (e.g., TOGAF, SABSA, SCP, SCM, zero‑trust); and/or
• Cloud security certifications (e.g. Microsoft Security, Azure Security, CCSK,…