Company: South African National Roads Agency SOC Limited (SANRAL)
Location: National (Various Offices)
Job Type: Permanent
Industry: Information Technology / Cybersecurity / Risk Management
Functional Area: Incident Response, Security Operations & Risk Management
Closing Date: 19 November 2025
Reference Number: 2745
About SANRAL
The South African National Roads Agency SOC Limited (SANRAL) is a state-owned enterprise responsible for managing, developing, and maintaining South Africa’s national road network. SANRAL is committed to providing safe, reliable, and efficient infrastructure that supports economic growth, facilitates trade, and connects communities nationwide.
With an increasing reliance on digital systems and technology-driven operations, SANRAL invests in robust cybersecurity and incident response frameworks to protect its assets, operations, and stakeholders. The organisation encourages innovation, compliance, and operational resilience, ensuring security across all levels of its operations.
Explore more SANRAL career opportunities and become part of a forward-thinking organisation shaping South Africa’s national infrastructure landscape.
Position Overview
SANRAL is seeking a highly skilled and experienced Manager: Incident and Response Management to lead its cybersecurity incident response and recovery efforts.
The successful candidate will oversee a dedicated incident response team, coordinate investigations, and ensure the organisation is resilient against security breaches. This role requires strategic leadership, technical expertise in cybersecurity frameworks, and the ability to collaborate with multiple stakeholders to safeguard SANRAL’s IT and operational environments.
Minimum Requirements
-
Bachelor’s degree, Advanced Diploma, or equivalent in Information Technology at NQF Level 7
-
Minimum of five (5) years relevant experience in IT security or incident response
-
Minimum of three (3) years supervisory experience
-
Compulsory advanced certification such as Certified Incident Handler (ECIH) or equivalent
Advantageous Qualifications and Experience:
-
Familiarity with cybersecurity frameworks such as NIST, ISO 27001, or equivalent
-
Experience with Software Development Lifecycle (SDLC) and Demand Management
-
Knowledge of supplier security activities and third-party risk management
-
Strong project management, business needs analysis, and leadership skills
Technical Competencies
-
In-depth understanding of incident response methodologies, cybersecurity tools, and threat management
-
Ability to lead cross-functional teams under high-pressure situations
-
Strong analytical skills for incident investigation, root cause analysis, and risk mitigation
-
Excellent communication and reporting skills for technical and non-technical stakeholders
-
Knowledge of regulatory and industry standards for security, risk management, and compliance
-
Proficiency in documenting and maintaining incident records, response plans, and audit logs
Key Responsibilities
1. Leadership and Team Management
-
Lead and coordinate a cross-functional incident response team during security events.
-
Maintain composure and provide decisive leadership in high-pressure situations.
-
Allocate tasks effectively, monitor team performance, and ensure operational readiness.
2. Incident Response Oversight
-
Manage all phases of incident response: containment, eradication, and recovery.
-
Develop and maintain incident response playbooks tailored to different security threats.
-
Oversee real-time coordination between technical teams and stakeholders during incidents.
3. Incident Investigation
-
Lead root cause analyses of security incidents and provide actionable recommendations.
-
Coordinate with forensic investigators to collect and analyse digital evidence with proper chain-of-custody.
-
Conduct post-incident reviews to identify gaps and prevent recurrence.
-
Organize tabletop exercises and simulations to test incident response effectiveness.
4. Risk Management and Compliance
-
Maintain and update SANRAL’s Incident Response Plan (IRP) in alignment with industry standards and regulations.
-
Integrate incident response processes across IT, Legal, Compliance, and operational departments.
-
Monitor threat landscape and recommend mitigation strategies to reduce organizational risk.
5. Reporting and Stakeholder Communication
-
Prepare detailed incident reports for senior management, highlighting impact, resolution, and next steps.
-
Provide ongoing updates on incident metrics, trends, and compliance status to leadership.
-
Ensure thorough documentation for audits, regulatory compliance, and continuous improvement.
Core Competencies
-
Strategic leadership in IT security and incident management
-
Strong analytical and problem-solving abilities
-
Excellent verbal and written communication skills
-
Stakeholder and team management expertise
-
Ability to operate under pressure with high attention to detail
-
Project management and organisational capabilities
Why Join SANRAL
-
Be part of a national organisation committed to secure, resilient, and innovative infrastructure operations.
-
Lead a high-impact cybersecurity and incident response function protecting critical national assets.
-
Opportunities for professional development, certification support, and career growth.
-
Contribute to SANRAL’s mission of maintaining safe, reliable, and digitally resilient national roads.
Employment Reference Checks
Employment reference checks are a mandatory part of SANRAL’s recruitment process. Candidates must sign a consent form authorizing SANRAL to verify qualifications, experience, and references. All information collected will remain confidential and used solely for recruitment purposes.
Employment Equity
SANRAL is an equal opportunity employer. Appointments will be made in line with the organisation’s Employment Equity Plan, with preference for candidates from designated groups where applicable.
POPIA Compliance
All personal information provided during recruitment will be handled in accordance with the Protection of Personal Information Act (POPIA) and used exclusively for recruitment and HR administrative purposes.
How to Apply
Qualified candidates are invited to apply online via SANRAL’s official careers portal:
👉 Apply Now via SANRAL Careers
Closing Date: 19 November 2025
Note: Only shortlisted candidates will receive feedback.
Explore More Opportunities
Connect With Us
Stay updated with SANRAL IT and security vacancies across South Africa:
Leave a Reply