Senior Information Security Specialist at JSE, Sandton
JSE Limited · Sandton, Gauteng
Overview
The JSE is looking for a highly experienced security specialist to protect critical financial systems and data. You will drive security assurance across on premises and cloud environments, lead risk assessments and mentor junior staff. This is a senior permanent role in Sandton for someone with deep expertise in information security governance, architecture and operations. If you want to safeguard one of Africa's largest stock exchanges, this is your chance.
About the role
The Johannesburg Stock Exchange is hiring a Senior Information Security Specialist to join its Information Technology team in Sandton. You will be responsible for driving information security assurance services across the JSE technology landscape, ensuring the confidentiality, integrity and availability of critical systems and data.
As a subject matter expert, you will design, implement, monitor and evolve security controls across on premises and cloud environments. The role covers information security assurance and risk management, security architecture and governance, compliance and regulatory assurance, stakeholder and vendor management, as well as security operations and continuous improvement.
You will identify, assess and mitigate security risks, conduct vulnerability assessments and penetration tests, investigate security incidents, review architecture designs and align security practices with frameworks like POPIA, SWIFT, NIST, ISO and OWASP. You will also provide Level 3 security support, lead security projects and mentor junior professionals.
Application notes: The listing was published on PNet. Please apply through the PNet platform using the link on the job page. No specific documents or email instructions were provided in the listing.
Requirements
- Degree in Information Systems, Information Security, Computer Science or a related field
- One or more certifications such as CISSP, CISM, CISA, CRISC, Licensed Penetration Tester (LPT), F5 certifications (101, 201, 301, 302, 303, 304) or Cisco Security Certifications including FireSIGHT IPS
- Advantageous certifications: Certified Ethical Hacker (CEH), Application Penetration Testing, Network Security Administrator (NSA), Certified Application Security Tester
- Minimum 10 years IT experience
- Minimum 7 years experience in an Information Security Specialist role
- Proven experience in enterprise security operations, governance, risk management and security architecture
- Knowledge of penetration testing principles, methodologies and tools such as Burp, Metasploit, Wireshark, John the Ripper, Cain & Abel, Kali and Nmap
- Advanced knowledge of vulnerability management processes and tools such as Nessus, Rapid7 and OpenVAS
- Knowledge of industry standards including ISO, NIST, OWASP, CIS and CSA
- Knowledge of South African regulatory standards including POPIA, Cyber Crimes Act, SWIFT and the Joint Standards Framework
- Cloud security knowledge for Azure and AWS environments
- Knowledge of encryption principles, data loss technologies and operational security controls
- Programming and database knowledge at intermediate level
Responsibilities
- Identify, assess, report and mitigate security risks across applications, infrastructure and cloud environments
- Conduct security risk assessments, audits, vulnerability assessments and penetration testing activities
- Drive remediation of security vulnerabilities and investigate security incidents with root cause analysis
- Provide specialist security input into enterprise architecture, solution design and technology adoption
- Review architecture designs and recommend appropriate security controls
- Ensure security principles are embedded throughout the Software Development Lifecycle
- Support regulatory and compliance audits and drive remediation of audit findings
- Develop and implement security metrics and reporting frameworks for senior management
- Manage relationships with security technology vendors and service providers
- Provide Level 3 security support, monitor security technologies and mentor junior security professionals
Job details
- Organisation
- JSE Limited
- Location
- Sandton, Gauteng
- Job type
- Full time
- Experience level
- Senior (10+ years)
- Education
- Bachelor
- Category
- Safety & Security
- Application Method
- Apply online
Success Guide
This is a senior role at one of South Africa's most recognised financial institutions, so your application needs to show depth. Highlight your hands-on experience with penetration testing, vulnerability management and security architecture across both on premises and cloud environments. The JSE operates in a highly regulated space, so mention your familiarity with POPIA, SWIFT, NIST and ISO standards. Certifications like CISSP or CISM carry real weight here, so make sure they are prominent on your CV. In interviews, expect questions on incident response, risk assessment and how you have improved security postures in previous roles. The role is on site in Sandton, so be ready to discuss your ability to work closely with IT teams and business stakeholders. Good luck.
How we help you prepare
This employer takes applications on their own website, so you'll submit this one yourself — but SPAAN NOW gets everything ready for you first. Here's how it works:
- Our AI tailors your CV to match this job's keywords and requirements, so it stands out to recruiters and screening systems.
- A custom cover letter is written specifically for this role — no generic templates.
- We gather the documents this job needs: CV, Degree certificate and Professional registration. SPAAN NOW pulls these from your profile and packages them together, ready to attach.
- Once your application is prepared, we show you exactly how and where to apply — just follow the link to the employer and submit your ready-made CV, cover letter and documents.
- Mark it as applied under Applications to keep track, and if you're shortlisted, use AI Interview Prep to practise questions commonly asked for roles like this.
We do the hard part — tailoring and gathering everything — so applying yourself only takes a minute.
Spaan Talk
Nobody has said anything yet. Be the first.