Cyber Prevention Specialist (Contract) at Exponant, Century City
Exponant · Century City, Cape Town, Western Cape
Overview
Exponant is hiring a Cyber Prevention Specialist for a one year contract based in Century City, Cape Town. You will work with a leading telecoms client, identifying and managing cyber security risks, ensuring controls are in place before new products and services go live, and helping teams build security into their daily work. If you have five or more years in cyber security and a passion for preventative security, this could be a great next step.
About the role
Our Century City based client in the telecoms industry has a one year contract opportunity for a Cyber Prevention Specialist. The role focuses on stopping cyber threats before they happen by building security into products, services and technology from the start.
You can expect to:
- Assess cyber security risks in new and changing products, services, applications and technology solutions, then define controls that avoid, reduce or mitigate those risks.
- Review solution designs and control implementation to confirm security requirements are built in during design and build.
- Provide security assurance before go live, making sure required controls are implemented, evidenced and aligned with the client's security requirements and applicable laws.
- Assess cyber security risks from material changes to live products and services, and track agreed remediation actions.
- Ensure security risks, access, data, infrastructure and control obligations are addressed when things are decommissioned.
- Manage Cyber Prevent operations, planning, prioritisation and delivery governance across assigned business units and markets.
- Manage KRI data quality, reporting and automation, and escalate control weaknesses and delivery blockers.
- Translate policies, standards and control requirements into practical guardrails, security patterns and acceptance criteria.
- Manage cyber security assessment governance and quality assurance, including evidence review and remediation tracking.
- Support DevSecOps security enablement by embedding preventative controls into agile delivery, engineering practices, CI/CD pipelines and developer tooling.
- Partner with Security Architecture, Cyber Defence, Identity, Cloud Security, Technology Risk, Privacy, Audit and delivery teams.
Application notes: This is a fixed term contract role for one year. Make sure your CV clearly shows your cyber security governance, risk, assurance and preventative controls experience.
Requirements
- Three year technical diploma or degree in Information Security, Computer Science, Engineering or a related discipline.
- Relevant industry certification. CISSP is strongly preferred. CCSP, OSCP, CISM, CISA or equivalent certifications will be considered.
- SABSA, TOGAF or other security architecture qualifications are advantageous.
- Minimum of five years experience in a cyber security role, including responsibility for governance, risk, assurance or preventative security controls.
- Knowledge of recognised technology management and compliance frameworks, including ISO/IEC 27001, NIST CSF, ISF, PCI DSS, OWASP and SANS.
Responsibilities
- Identify cyber security risks in new and changed products, services, applications and technology solutions, and define preventative controls to avoid, reduce or mitigate those risks.
- Review solution designs and control implementation to confirm security requirements are embedded during design and build.
- Provide security assurance before go live by validating that required controls are implemented, evidenced and aligned with the client's security requirements and applicable laws.
- Assess cyber security risks arising from material changes to live products, services and technology environments, and track agreed remediation actions.
- Ensure security risks, access, data, infrastructure and control obligations are addressed when products, services or technology components are decommissioned.
- Manage Cyber Prevent operations, planning, prioritisation, delivery governance and performance across assigned business units and markets.
- Manage KRI data quality, reporting and automation, providing accurate management information, trend analysis and timely escalation of control weaknesses, risks and delivery blockers.
- Provide preventative cyber security assurance, guidance and decision support to strategic programmes, projects, products and technology services throughout the delivery lifecycle.
- Translate company policies, standards and control requirements into practical requirements, guardrails, security patterns and acceptance criteria.
- Manage assigned cyber security assessment governance and quality assurance activities, including planning, evidence review, recommendations, exceptions and remediation tracking.
- Identify material cyber security risks, agree proportionate treatment plans with accountable owners, and track remediation, exceptions and residual risk acceptance to closure.
- Manage assigned CHARM compliance activities, control evidence, technology alignment and the tracking of control gaps and overdue actions.
- Support DevSecOps security enablement by helping to embed preventative controls into agile delivery, engineering practices, CI/CD pipelines and developer tooling.
- Provide technical subject matter expertise, executive decision support and escalation management for complex or high risk cyber security matters.
- Partner with Security Architecture, Cyber Defence, Identity, Cloud Security, Technology Risk, Privacy, Audit and delivery teams to resolve cross functional dependencies.
Job details
- Organisation
- Exponant
- Location
- Century City, Cape Town, Western Cape
- Job type
- Contract
- Experience level
- Senior (5+ years)
- Education
- Diploma
- Category
- Safety & Security
- Application Method
- Apply online
Success Guide
This role is a great fit if you have solid cyber security experience and want to work on preventative security in a dynamic telecoms environment. The client is based in Century City, so you will be working on site in a busy commercial hub with easy access to transport and shops.
When you apply, make sure your CV highlights your experience with governance, risk, assurance and preventative controls. The hiring team will want to see that you have worked with frameworks like ISO 27001, NIST CSF and PCI DSS, and that you understand how to embed security into projects and agile delivery.
Certifications matter here. If you have a CISSP, make it prominent. If you have CCSP, OSCP, CISM or CISA, list those too.
Prepare for interview questions about how you have identified risks in new products or services, how you have tracked remediation actions, and how you have worked with cross functional teams. Being able to explain your approach to balancing security with business needs will help you stand out.
Good luck!
How we help you prepare
This employer takes applications on their own website, so you'll submit this one yourself — but SPAAN NOW gets everything ready for you first. Here's how it works:
- Our AI tailors your CV to match this job's keywords and requirements, so it stands out to recruiters and screening systems.
- A custom cover letter is written specifically for this role — no generic templates.
- We gather the documents this job needs: CV, Diploma certificate, Degree certificate and Professional registration. SPAAN NOW pulls these from your profile and packages them together, ready to attach.
- Once your application is prepared, we show you exactly how and where to apply — just follow the link to the employer and submit your ready-made CV, cover letter and documents.
- Mark it as applied under Applications to keep track, and if you're shortlisted, use AI Interview Prep to practise questions commonly asked for roles like this.
We do the hard part — tailoring and gathering everything — so applying yourself only takes a minute.
Spaan Talk
Nobody has said anything yet. Be the first.