South African Revenue Services (Sars) Vacancies

In brief

**Overview** This role is for a Manager: Cyber Security Operations Centre (CSOC) at the South African Revenue Services (SARS), reporting to the Area Head IT Security Operations within the Strategy Enablement & Modernisation Division. The position is located at Head Office Pretoria. The primary purpose is to lead and manage the Cyber Security Operations Centre (CSOC) and User Access Management (UAM) functions. This involves ensuring effective monitoring, detection, investigation, and response to cyber threats, while simultaneously strengthening identity and access management, operational resilience, and the protection of SARS' information assets, systems, and services. The role encompasses strategic and operational management, focusing on the effective implementation, monitoring, and continuous improvement of information security controls. It translates information security strategy into measurable operational execution and involves managing internal teams and outsourced security service providers. **What you will do** The successful candidate will be responsible for: * **Process Management:** * Driving tactical implementation to achieve business unit excellence and performance improvement. * Directing, controlling, coordinating, and optimising budgeted resources to meet objectives. * Ensuring the development and implementation of practices aligned with operational policy and procedural frameworks. * Implementing tactical strategy and delivery plans through operational activities to achieve targets. * Converting approved tactical security strategy into a measurable operational plan with defined deliverables, performance measures, priorities, and resource requirements. * Planning work outputs, integrating interdependent activities, and specifying priorities, standards, and procedures for tactical implementation. * Providing periodic performance reports and progress on short-term initiatives for tactical plan realignment. * Recommending and executing changes to optimise processes, systems, policies, and procedures. * Communicating top-down policy modifications, objective achievement progress, and critical success factors to stakeholders. * Utilising insights from integrated business reports to measure success and realign tactical strategy implementation objectives. * Planning and managing projects within the area of accountability. * Providing integrated oversight and operational management of Security Operations Centre (SOC) and User Access Management functions. * Monitoring the effectiveness of security controls, operational performance, service delivery standards, risks, and compliance requirements, and implementing corrective actions for deficiencies. * Providing technical direction for the development, design, and integration of systems to prevent loss of SARS assets. * Liaising with vendors to resolve product and service level issues. * **Governance:** * Implementing governance, risk, and compliance policy within the practice area to manage exposure. * Managing and advising on the translation and application of policy in a specific functional area. * Complying with organisational internal control and governance standards in finance and procurement processes. * **People Management:** * Developing and implementing appropriate people capacity plans aligned with delivery and efficiency targets and budget. * Planning and implementing enhanced organisational efficiency by addressing development requirements and providing tools for people resources. * Translating performance expectations into specific metrics and goals for effective service delivery, problem-solving, and objective achievement. * Ensuring compliance with applicable health, safety, security, and workplace policies within the Cyber Security Operations Centre environment. * **Financial Management:** * Drawing up a budget aligned to tactical delivery plans, monitoring actual vs. planned expenditure, minimising costs, and reporting on cost efficiency. * Implementing and monitoring financial control, cost management, and corporate governance within the area of accountability. * **Client Relations:** * Building strong relationships and implementing service level agreements that promote SARS with internal and external stakeholders. * Developing and ensuring implementation of practices that build service delivery excellence and encourage exceptional client service. * Managing an integrated service excellence culture that fosters rewarding relationships and provides opportunities for feedback. **Requirements (from the original advert)** * **Education and Experience (Option 1):** * Bachelor’s Degree / Advanced Diploma (NQF 7) in Information Security, AND * 8–10 years’ IT Security experience, including a minimum of 4 years’ of demonstrated people management experience. * **Education and Experience (Alternative Option 2):** * Senior Certificate (NQF 4), AND * 15 years’ IT Security experience, including a minimum of 4 years’ of demonstrated people management experience. * **Certification (Required for both options):** * A completed CISM, CISSP, or an equivalent recognised Information Security Management certification. **Who should apply** SARS is seeking a highly skilled, results-driven cybersecurity specialist with sound judgement, strong business acumen, and a future-focused mindset. The ideal candidate will be capable of contributing to SARS' higher purpose and service delivery by driving effective IT security controls and strengthening cyber resilience. Applicants should demonstrate strong information security management experience, effective leadership and stakeholder management capabilities, and the ability to align security operations with organisational objectives and risk requirements. The role requires someone who can lead and manage CSOC and UAM functions to effectively monitor, detect, investigate, and respond to cyber threats, while strengthening identity and access management, operational resilience, and the protection of SARS information assets, systems, and services. **Deadline** 04 November 2026 **Reference** Original posting: https://www.govpage.co.za/vacancies/south-african-revenue-services-sars-vacancies-57 Source: govpage

Summary drafted with AI assistance from the original advert. The advert itself is the authority — how we use AI.

At a glance

• At least 4 years of experience.

Extracted automatically from the advert; confirm requirements on the original listing.

Job description

Before you apply

• Confirm the requirements and closing date on the original listing (govpage). SPANi lists vacancies from other sites and may not reflect last-minute changes.
• Legitimate employers do not charge application, registration or training fees.
• Don't send your ID or bank details before you have confirmed the employer is real.

How to spot a job scam

Before you apply

• Read the full advert and confirm you meet the minimum requirements before applying.
• Tailor your CV headline and most recent experience to the job title and key skills.
• Note the closing date and reference number, and keep a copy of what you submit.
• Apply only through the employer or job board link — never pay to apply.