Cloud & Cyber Security Manager

Are you a security minded information technology leader with a passion for protecting and scaling cloud environments? Join our Information Technology team as a Cloud & Cyber Security Manager in Plattekloof
, where you'll own Herotel's cloud infrastructure on AWS and Azure, lead our cyber security and disaster recovery programmes, and drive IT governance, risk and compliance.

This role is perfect for a strategic, hands on leader who is comfortable presenting to Exco and the Audit Committee, loves building resilient systems and is excited to lead a team through ISO 27001 certification.

• Set Herotel's cloud strategy and roadmap across AWS and Azure, aligned to company strategy
• Own the cloud architecture and governance framework, including identity and access standards, network segmentation, security baselines and guardrails
• Set the annual cloud, cyber security and compliance budget with the CFO, manage spend against budget and drive cost optimisation
• Manage cloud, security and compliance vendors and managed service providers, including contracts, SLAs and costs
• Own the IT disaster recovery and business continuity strategy, including protected backups, ransomware recovery and an annual full DR test
• Own Herotel's cyber security strategy and control framework, and oversee security operations through the Cybersecurity Engineer
• Act as the escalation and decision point for major security incidents, including executive communication
• Sponsor Herotel's ISO 27001 certification programme and chair the ISMS management review
• Approve and own the IT, information security and AI policy frameworks, and maintain the IT risk register
• Own the IT scope of the annual audit and make sure findings are remediated on time
• Serve as Herotel's Information Officer under POPIA and PAIA, overseeing compliance, data subject requests and security compromise notifications
• Own the AI tool approval process, including security and POPIA review before use
• Set the security standards that in house and outsourced software development must meet
• Report on cyber risk, cloud and DR readiness to Exco and the Audit Committee, and lead, develop and coach your direct reports

• A Bachelor's Degree in Computer Science, Information Technology, Information Systems or a related field
• At least 10 years' experience in IT, including at least 5 years in cloud or cyber security and at least 5 years in a leadership role
• Proven experience designing, securing and operating production environments on AWS and Azure
• Hands on experience designing, implementing and testing disaster recovery and backup for cloud and on premises workloads, including ransomware recovery
• Experience with ISO 27001
• Experience managing cloud and security budgets, vendor contracts and managed service providers
• Experience reporting to Exco, a board or audit committees
• Experience in an ISP or telecommunications environment is strongly preferred
• CISM, CISSP or CCSP will be beneficial
• AWS Certified Solutions Architect Professional or AWS Certified Security Specialty will be beneficial
• Microsoft Certified Azure Solutions Architect Expert or Cybersecurity Architect Expert will be beneficial
• ISO 27001 Lead Implementer or Lead Auditor, or a business continuity certification such as DRI CBCP or ISO 22301 Lead Implementer, will be advantageous
• Working knowledge of POPIA and PAIA, and exposure to NIST CSF, CIS Controls or King IV IT governance is advantageous
• Strong knowledge of AWS and Azure security services, identity (Entra  AWS IAM) and modern security tooling such as SIEM, EDR, cloud security posture management and vulnerability management
• Working knowledge of ITIL incident, change and problem management
• Strong strategic thinking, decision making and the ability to see the bigger picture
• Excellent communication and stakeholder management skills, with the ability to operate at all levels of the organisation
• The ability to manage change, maintain a high level of confidentiality and work effectively under pressure in a fast paced environment

• Exposure to a dynamic workplace
• A chance to grow your skills through our internal academy
• A friendly, team-driven environment
• Group Risk Benefits
• Medical Benefits
• Health and Lifestyle Programmes

• Please ensure that the information you provide in your application is true, accurate, and correct.
• Preference will be given to candidates from Designated Groups, as defined by the Employment Equity Act and in line with Herotel's Employment Equity Plan.
• By submitting…