Manager: Cyber Security Operations Centre (CSOC) at The South African Revenue Service (SARS)

In brief

**Overview** This role is for a Manager of the Cyber Security Operations Centre (CSOC) at The South African Revenue Service (SARS). SARS is the national tax collecting authority, established as an autonomous agency responsible for administering the South African tax system and customs service, including collecting national taxes, duties, and levies. The primary purpose of this position is to lead and manage the CSOC and User Access Management (UAM) functions. This involves ensuring effective monitoring, detection, investigation, and response to cyber threats, while also strengthening identity and access management, operational resilience, and the overall protection of SARS's information assets, systems, and services. **What you will do** As the Manager: Cyber Security Operations Centre (CSOC), you will be responsible for: * Leading and managing the CSOC and User Access Management (UAM) functions. * Ensuring effective monitoring, detection, investigation, and response to cyber threats. * Strengthening identity and access management, operational resilience, and the protection of SARS information assets, systems, and services. * Driving tactical implementation for business unit excellence and performance improvement. * Directing, controlling, coordinating, and optimising budgeted resources. * Developing and implementing practices aligned with operational policy and procedural frameworks. * Implementing tactical strategy and delivery plans to achieve operational targets. * Converting approved tactical security strategies into measurable operational plans with defined deliverables, performance measures, priorities, and resource requirements. * Planning work outputs, integrating interdependent activities, and specifying priorities, standards, and procedures. * Providing periodic performance reports and realigning tactical plans as needed. * Recommending and executing changes to optimise processes, systems, policies, and procedures. * Communicating policy modifications, objective progress, and critical success factors to stakeholders. * Utilising insights from integrated business reports to measure success and realign tactical strategy. * Planning and managing projects within your area of accountability. * Providing integrated oversight and operational management of SOC and UAM functions. * Monitoring the effectiveness of security controls, operational performance, service delivery, risks, and compliance, implementing corrective actions for deficiencies. * Providing technical direction for the development, design, and integration of systems to prevent the loss of SARS assets. * Liaising with vendors to resolve product and service level issues. * Implementing governance, risk, and compliance policies and managing related exposure liability. * Managing and advising on the translation and application of policy within the functional area. * Complying with organisational internal control and governance standards in finance and procurement. * Developing and implementing appropriate people capacity plans in line with delivery and efficiency targets. * Identifying and addressing development requirements for staff and providing necessary tools. * Translating performance expectations into specific metrics and goals. * Ensuring compliance with health, safety, security, and workplace policies within the CSOC environment. * Drawing up and monitoring budgets, minimising expenditure, and reporting on cost efficiency. * Implementing and monitoring financial control, cost management, and corporate governance. * Building strong relationships and implementing service level agreements with internal and external stakeholders. * Developing and ensuring the implementation of practices that build service delivery excellence. * Managing an integrated service excellence culture that encourages feedback and exceptional service. **Requirements (from the original advert)** * **Job Type**: Full Time * **Qualification**: Bachelors, Matric, Postgraduate Diploma * **Experience**: 8 - 15 years * **Location**: Gauteng * **City**: Pretoria * **Job Field**: ICT / Computer **Minimum Qualification & Experience Required**: * Bachelor's Degree / Advanced Diploma (NQF 7) in Information Security AND 8-10 years' experience in an Information Technology Security role, of which 3-4 years at a junior management level, AND a recognised professional certification in Information Security Management, such as Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP), or an equivalent recognised certification. **Alternative #**: * Senior Certificate (NQF 4) AND 15 years Information Technology Security experience, of which 3-4 years at a junior management level, AND a recognised professional certification in Information Security Management, such as Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP), or an equivalent recognised certification. **Who should apply** This role is suitable for a highly experienced and certified IT Security professional with a proven track record in leadership and management within a Cyber Security Operations Centre (CSOC) and User Access Management (UAM) context. The ideal candidate will possess strong technical expertise in cyber threat detection, investigation, and response, coupled with strategic planning and tactical implementation skills. They should be adept at managing resources, projects, and budgets, ensuring compliance with governance and risk frameworks, and fostering a culture of service excellence. Candidates must meet the specific educational and experience requirements, including significant IT security experience and relevant professional certifications like CISM or CISSP. **Deadline** 11th October, 2026 **Reference** Original posting: https://www.myjobmag.co.za/job/manager-cyber-security-operations-centre-csoc-the-south-african-revenue-service-sars Source: myjobmag

Summary drafted with AI assistance from the original advert. The advert itself is the authority — how we use AI.

At a glance

• At least 8 years of experience.

Extracted automatically from the advert; confirm requirements on the original listing.

Job description

Before you apply

• Confirm the requirements and closing date on the original listing (myjobmag). SPANi lists vacancies from other sites and may not reflect last-minute changes.
• Legitimate employers do not charge application, registration or training fees.
• Don't send your ID or bank details before you have confirmed the employer is real.

How to spot a job scam

Applying for permanent roles

• Mirror the job title and top three requirements in your CV summary and most recent experience.
• Quantify results where possible: sales targets, cases handled, tickets closed, or team size.
• Proofread contact details and filenames before submitting — small errors cost interviews.
• Verify the company and role on the source page before sharing ID copies or banking details.