POSTBANK VACANCIES

POSTBANK

HEAD: DATA MANAGEMENT

REPORTS TO : General Manager: IT Optimisation

BUSINESS UNIT : IT

LOCATION : HEAD OFFFICE: PRETORIA

POSITION STATUS : Permanent

POSITION GRADE : D5

Purpose of the Job

The Head: Data Management is responsible for leading data management practices that support reliable, secure, governed and compliant information across the bank’s technology platforms, operational systems, retail banking data flows and reporting environments. Define and manage data governance, data ownership, data stewardship, data quality, data lineage, metadata, master data, reference data, data access, data lifecycle and operational data control practices to protect customer, account, transaction, payment, card, social grant and business information assets. Direct the management of critical banking data across core banking, payments, switch, card, digital banking, finance, General Ledger, fraud, Anti-Money Laundering, complaints, regulatory reporting and analytics environments to improve traceability from source system to report. Provide evidence of data lineage, access control, data changes, ownership, quality, reconciliation and remediation progress to support audit readiness, regulatory assurance and operational decision making. Coordinate data management activities across technology, operations, finance, risk, compliance, security, analytics and vendor teams to improve data reliability, reconciliation integrity, reporting quality, service continuity and the bank’s financial inclusion mandate.

Job Responsibilities

Data Management Strategy and Governance

·       Define the data management framework to guide data ownership, data stewardship, data quality, data control and operational data practices across the bank

·       Set data standards, data definitions, metadata requirements, naming conventions, reference data standards and control procedures to support accountable management of information assets

·       Establish data governance forums and reporting routines to review data risks, quality issues, remediation progress and control effectiveness

·       Define critical data elements for customer, account, balance, transaction, General Ledger, payment, card, switch, channel, Know Your Customer, sanctions, complaints, regulatory and reporting data to strengthen data accountability

·       Report material data risks, unresolved quality issues and control gaps to management forums to support informed decision making

·       Maintain an inventory of critical data elements and priority data flows across core banking, digital banking, payments, switch, cards, General Ledger (GL), reconciliation, fraud, Anti Money Laundering (AML), regulatory reporting and analytics platforms

Banking Data Quality and Integrity Management

·       Lead data quality management across core banking, payment, switch, card, digital channel, finance, reconciliation, reporting and analytics environments to improve information reliability

·       Monitor data completeness, accuracy, timeliness, validity and consistency to identify defects that affect service delivery, reconciliation, regulatory reporting or decision making

·       Coordinate data quality remediation with technology, operations, finance, business, analytics and vendor stakeholders to resolve root causes

·       Track duplicate, missing, inconsistent, stale, orphaned or unreconciled data to drive permanent corrective action

·       Maintain data quality dashboards, exception reports and remediation records to support audit and assurance reviews

Reconciliation Data and Operational Control

·       Coordinate data reconciliation, validation and control checks to confirm integrity across critical banking processes

·       Support reliable reconciliation between customer records, account records, sub ledgers, General Ledger records, transaction stores, switch records, payment files, settlement files, finance records and reporting outputs

·       Monitor data breaks, unmatched items, missing transactions, unusual postings, suspense trends and operational anomalies to identify service and control risks

·       Support data related incident, problem and change processes to protect production stability and transaction integrity

·       Protect payment services by maintaining effective data controls over relevant operational and payment information

Data Architecture Integration and Platform Support

·       Coordinate data architecture and lineage practices with enterprise architecture, solution architecture, operations, analytics and platform teams to improve transparency of data flows

·       Maintain data ownership records, data definitions, data lineage, metadata, master data and reference data to support traceability and accountability

·       Support resilient and auditable data pipelines across core banking, payment, switch, card, channel, reporting and analytics environments

·       Provide data management input into Integrated Banking Management System (IBMS), digital banking, data warehouse, data lakehouse, metadata catalogue, master data, reporting and analytics platform modernisation

·       Review data integration, application programming interface, streaming, batch, extraction and transformation practices to identify risks in data movement, quality and reporting reliability

Data Protection Regulatory and Audit Compliance

·       Apply data protection, retention, privacy and security requirements to data management activities to support responsible information use

·       Support Financial Intelligence Centre Act (FICA), Financial Intelligence Centre (FIC), South African Reserve Bank (SARB), Prudential Authority, National Payment System (NPS), Protection of Personal Information Act (POPIA), Anti Money Laundering (AML), audit and forensic evidence requirements through controlled extracts, lineage and retained proof

·       Maintain data control evidence, data access records, data handling records and governance decisions to support internal audit, external audit and regulatory review

·       Identify data access, data extraction, data movement and data handling risks to support timely remediation

·       Coordinate data related responses to audit findings, regulatory observations and assurance requests

Retail Banking Analytics and Decision Support

·       Enable trusted reporting for customer growth, account activity, deposits, balances, payment volumes, channel usage, fraud trends, failed transactions, reversals, complaints, operational incidents and financial performance

·       Partner with business and analytics teams to deliver dashboards, data marts and insights that support retail banking performance and service improvement

·       Improve customer view, segmentation, campaign, financial inclusion, product usage and service quality analytics through controlled and approved data sources

·       Review analytics outputs to confirm that reporting is based on reconciled, traceable and approved data sources

·       Support data driven decision making by improving the reliability, usability and business relevance of operational and customer data

Information Access Lifecycle and Security Control

·       Define data lifecycle controls for creation, use, storage, retention, archiving and disposal of information assets to reduce data risk

·       Review data access and usage practices to support appropriate handling of customer, account, payment, card and operational information

·       Coordinate controls over privileged data access, data extraction, masking, encryption and secure disposal to reduce exposure risk

·       Support the use of authorised or masked data in development, testing and reporting environments where applicable

·       Maintain data continuity and recovery requirements to support access to critical information during disruptions

·       Prevent uncontrolled extraction of customer, account, transaction, card, Know Your Customer (KYC), Personal Identification Number (PIN) adjacent or sensitive banking data and confirm that testing and reporting environments use masked or approved data where required

Data Operating Model and Service Management

·       Define the data management operating model to clarify data ownership, stewardship, issue management, service levels and escalation routines

·       Maintain a data issue register with accountable owners, closure dates, risk ratings and executive escalation for unresolved high-risk data issues

·       Establish data management service levels, issue resolution routines, control dashboards and executive reporting to improve delivery discipline

·       Support operational resilience of data pipelines, batch processing, beginning of day feeds, end of day feeds, failure recovery and production support routines

·       Drive skills transfer, documentation and reduced dependence on individual key persons or vendors to strengthen continuity

Stakeholder Vendor and Service Coordination

·       Engage business, technology, finance, operations, risk, compliance, security, analytics and audit stakeholders to clarify data management priorities and issues

·       Coordinate vendor inputs where external service providers support data platforms, data processing, reporting or data remediation activities

·       Provide specialist data management input into projects, system changes, service improvements and operational reviews

·       Communicate data risks, control gaps and remediation progress clearly to support transparent stakeholder management

·       Build effective working relationships across teams to improve accountability for data outcomes

Financial Management

·       Compile data management budget inputs and forecasts to support planned service delivery, data control and remediation requirements

·       Monitor data management expenditure against approved budgets to manage costs within allocated financial parameters

·       Review vendor cost drivers, support demand, data platform usage and remediation effort to identify optimisation opportunities

·       Track benefits from data management improvements to demonstrate improved reliability, reduced incidents and stronger control

People Management

·       Clarify role expectations, priorities and standards for direct reports to align delivery with data management objectives

·       Lead performance planning, review and feedback processes to support accountability and delivery

·       Coach and mentor direct reports to build capability in data management

·       Allocate work, manage capacity and monitor delivery timeframes to maintain effective functional performance and ensure the correct shift coverage

·       Support recruitment, onboarding, development and succession planning to maintain a capable and sustainable data management team

·       Address conduct, performance and attendance matters in line with Human Resources policies and labour legislation

Qualifications and Experience

·       Bachelor’s Degree in Computer Science, Information Systems, Data Management, Data Science, Statistics, Commerce, Finance Systems or related discipline (NQF Level 7)

·       Certificate in Data Management, Data Governance, Data Quality, Database Management, Data Protection or Information Technology Service Management (NQF Level 6)

·       Leadership Development Programme

·       10 Years’ Experience in the Information Technology industry

·       8 Years’ Experience in data management, data governance, data quality, database management or data operations

·       5 Years’ Experience in banking technology, payments, customer data, account data, transaction data or regulated financial services data environments

·       5 Years’ Experience in data control, data risk, data protection, audit support or regulatory compliance environments

Ideal

·       Post Graduate Degree in Computer Science, Information Systems, Data Management, Data Science, Statistics, Commerce, Finance Systems or related discipline (NQF Level 8)

·       Advanced Certificate in Data Governance, Data Architecture, Data Engineering, Data Protection, Data Analytics or Information Technology Governance (NQF Level 6)

·       Advanced Certificate in Banking Risk, Regulatory Reporting, Data Privacy, Information Security or Audit Management (NQF Level 6)

Advantageous

·       5 Years’ Experience in core banking data, payment data, card data, social grant data, reconciliation data, data platforms or operational reporting environments

·       3 Years’ Experience in vendor management, service management, data remediation, data lineage, data platform modernisation or information risk environments

·       3 Years’ Experience in Know Your Customer data, Anti Money Laundering data, fraud data, complaints data, General Ledger data, switch data or regulatory reporting data

Special requirements

May be required to provide specialist support for critical data incidents, regulatory reviews, audit requests, major system changes, data remediation activities, production incidents, disaster recovery tests, batch failures, data pipeline failures or urgent service restoration events.

How to Apply

If you wish to apply and meet the requirements, please forward your Curriculum Vitae (CV) to recruitmentNM@postbank.co.za

Please indicate in the subject line the position you are applying for. 

Closing Date11 November 2026 

Disclaimers

The South African Postbank SOC Limited is committed to the achievement and maintenance of diversity and equity in employment, especially with regard to race, gender and disability. In compliance with the banks employment equity plans, first preference will be given to candidates from designated groups. Correspondence will be limited to short listed candidates only.

If you do not hear from the South African Postbank SOC Limited or its Agent within 3 months of this advertisement, please accept that your application has been unsuccessful. The South African Postbank SOC Limited reserves the right not to fill the positions or to re-advertise the positions at any time.

POPIA provides that everyone has the right to privacy and it includes a right to protection against the unlawful collection, retention, dissemination and use of personal information. By applying for employment you consent to the processing of your personal information with Postbank. Your personal information and any attached text or documentation are retained by Postbank for a period in accordance with relevant data legislation.

HEAD: IT OPERATIONS

REPORTS TO : General Manager: IT Optimisation

BUSINESS UNIT : IT

LOCATION : HEAD OFFICE: PRETORIA

POSITION STATUS : Permanent

POSITION GRADE : D5

Purpose of the Job

The Head: IT Operations is responsible for leading production technology operations across infrastructure, integration services, database platforms, cloud services, core banking dependencies, payment services, switching services, channel technology, batch processing and operational technology environments. Direct technology operations teams to maintain availability, performance, capacity, monitoring, recovery, continuity, service management and operational control for services that affect customer access to accounts, balances, payments, cards, withdrawals, deposits, grant payments, digital channels and branch services. Manage operational readiness, production support, vendor accountability, privileged access control, major incident command, disaster recovery and audit evidence to protect transaction integrity, customer data and service continuity. Protect savings services and South African Social Security Agency payment services by strengthening operational resilience, security compliance, recovery capability and evidence-based service control. 

Job Responsibilities

Technology Operations Leadership

·       Lead infrastructure, integration, database, cloud and production technology operations to maintain stable, secure and responsive technology services

·       Set operational priorities, standards and escalation procedures to support agreed availability, performance and recovery targets

·       Monitor operational performance, service trends, transaction impact and customer impact to identify root causes and reduce repeat failures

·       Coordinate restoration of critical technology services to minimise disruption to customers, employees, partners and operations

·       Protect payment services by maintaining effective operational support for critical technology platforms

Production Stability and Availability

·       Direct production support activities to maintain availability of critical banking platforms and customer facing technology services

·       Monitor core banking availability, channel availability, payment service availability, infrastructure stability and major incident frequency to identify service risks

·       Coordinate proactive monitoring of transactions, interfaces, batch services, infrastructure and customer impacting services to improve early detection

·       Review service desk queues, support queues and escalation routines to confirm that they support high volume retail banking operations

·       Maintain operational readiness for new or changed banking platforms to support safe transition into production

Core Platform and Transaction Integrity Operations

·       Direct production technology support for core platform dependencies, transaction processing, batch services, interface monitoring, operational control, core banking production support, customer and account servicing, General Ledger (GL) related interfaces, End of Day (EOD), Beginning of Day (BOD), postings, interest, fees, reversals and reconciliation dependencies

·       Monitor transaction flows, failed interfaces, delayed processing, settlement dependencies and reconciliation impacts to identify service risks

·       Coordinate technology response where incidents affect balances, postings, payments, reversals, statements, files or settlement processes

·       Apply strict operational controls over production scripts, data fixes, privileged actions and emergency changes to protect transaction integrity

·       Treat incidents affecting balances, missing transactions, failed payments, reconciliation breaks and audit gaps as high-priority banking integrity matters

Payments Switching and Channel Operations

·       Direct operational support for payment services, switching interfaces, card platforms, automated teller machine services, point of sale services, digital channels and file exchanges

·       Monitor clearing, settlement, payment files, authorisations, reversals, exceptions and partner interfaces to identify service and control risks

·       Coordinate escalation paths with payment partners, processors, card service providers, network providers and service integrators to support timely restoration

·       Support operational readiness for payment, card, digital channel and partner channel changes to protect production stability

·       Maintain operational evidence for payment and channel incidents to support audit, regulatory and management review

·       Infrastructure Cloud and Platform Operations

·       Direct infrastructure operations across hosting, networks, servers, storage, workplace technologies, cloud services and related platform environments to maintain service reliability

·       Oversee capacity, availability, patching, backup, performance, job scheduling and monitoring activities to support resilient technology operations

·       Manage infrastructure and cloud incidents, operational risks and service constraints to protect production stability

·       Review ageing technology, cloud utilisation, platform performance and operational dependencies to identify modernisation priorities

·       Support infrastructure and cloud changes, upgrades and service transitions to improve operational efficiency and service continuity

Integration Database and Information Platforms Operations

·       Lead integration services operations across middleware, interfaces, application programming interfaces, managed file transfer and data exchange platforms to maintain reliable system connectivity

·       Direct database operations to maintain secure, available and high performing data services across critical platforms

·       Monitor integration performance, database performance, transaction flows and interface exceptions to identify failures and service risks

·       Coordinate resolution of integration and database incidents with applications, infrastructure, vendors and business teams to restore end to end service

·       Maintain integration and database operating standards, support procedures and service documentation to support controlled operations

Incident Problem Change and Service Management

·       Lead major incident command and service restoration activities for critical technology failures to reduce customer, financial and regulatory impact

·       Coordinate root cause analysis and permanent corrective actions for recurring infrastructure, integration, database, cloud, payment and channel issues

·       Manage operational input into incident, problem, change, release, service request, availability, capacity, configuration management processes, and service-level management disciplines

·       Review change impact, operational readiness, evidence requirements and rollback plans before implementation of high risk technology changes

·       Chair or participate in major incident reviews, root cause sessions and operational service reviews to improve service discipline

·       Resilience Continuity and Recovery Management

·       Support disaster recovery, continuity planning, failover testing, backup restoration and service recovery exercises for critical technology services

·       Confirm that recovery time expectations, recovery point expectations and recovery evidence are understood, tested and maintained for critical banking systems

·       Drive resilience improvements across cloud, data centre, network, application, database, integration and third party dependencies

·       Maintain runbooks, recovery documentation, incident records, change records and lessons learned to support audit and assurance reviews

·       Report recovery gaps, resilience risks and unresolved service continuity issues to governance forums to support informed decision making

·       Recovery Time Objective (RTO) and Recovery Point Objective (RPO) achievement, backup restore success, failover testing, runbook currency and evidence of recovery testing for critical banking systems

Operational Risk Compliance and Access Control

·       Apply information technology service controls, security requirements and compliance obligations to technology operations processes

·       Strengthen controls over privileged access, service accounts, audit logs, production data, script execution and change approval to reduce operational risk

·       Support compliance with Payment Card Industry Data Security Standard, Protection of Personal Information Act and applicable payment requirements through controlled operational practices

·       Identify operational, security, vendor and compliance risks in technology operations to drive timely remediation

·       Maintain operational evidence, access review records, control records and audit remediation evidence to support regulatory and assurance review

·       Information Technology General Controls (ITGC) evidence, access reviews, privileged access controls, service account controls, audit log completeness, unauthorised change prevention and vulnerability remediation tracking

Vendor Partner and Stakeholder Governance

·       Manage vendor and service provider performance to confirm delivery against agreed support, escalation and service restoration commitments

·       Challenge vendor performance where recurring incidents, poor response or weak root cause analysis affects banking operations

·       Maintain support obligations, escalation contacts, service evidence packs and operational review records to support vendor accountability

·       Engage business operations, payments, cards, digital channels, risk, compliance, audit, cyber security, data protection, project delivery and technology teams to resolve operational dependencies

·       Escalate vendor or internal support failures where service risk requires senior intervention

·       Operational Acceptance and Production Readiness

·       Define operational readiness gates and minimum evidence requirements before new systems, major changes or service transitions move into production

·       Review support models, monitoring arrangements, runbooks, access controls, escalation paths and recovery requirements before operational acceptance

·       Recommend suspension, rollback, deferral or rejection of production changes or go-lives where readiness, control or service risk is unacceptable

·       Require root cause analysis, permanent corrective action and control remediation for recurring service issues

·       Support project teams with production readiness input to protect stable transition into live operations

Financial Management

·       Compile technology operations budget inputs and forecasts to support planned infrastructure, database, cloud and integration service requirements

·       Monitor technology operations expenditure against approved budgets to manage costs within allocated financial parameters

·       Review vendor cost drivers, platform utilisation, support demand and recovery requirements to identify optimisation opportunities

·       Track benefits from operational improvements to demonstrate improved reliability, reduced incidents and better value from technology spend

People Management

·       Clarify role expectations, priorities and standards for direct reports to align delivery with technology operations objectives

·       Lead performance planning, review and feedback processes to support accountability and delivery

·       Coach and mentor direct reports to build capability in infrastructure, integration services, database operations, cloud infrastructure and operational resilience

·       Allocate work, manage capacity and monitor delivery timeframes to maintain effective technology operations performance

·       Support recruitment, onboarding, development and succession planning to maintain a capable and sustainable operations team

·       Address conduct, performance and attendance matters in line with Human Resources policies and labour legislation 

Qualifications and Experience

·       Bachelor’s Degree in Computer Science, Information Systems, Computer Engineering, Network Engineering or related discipline (NQF Level 7)

·       Certificate in Information Technology Service Management, Infrastructure Management, Cloud Infrastructure, Information Technology Operations or Business Continuity Management (NQF Level 6)

·       Leadership Development Programme

·       12 Years’ Experience in the Information Technology industry

·       10 Years’ Experience in infrastructure operations, systems operations, cloud operations, database operations, applications operations or integration services

·       5 Years’ Experience in banking technology, payments, digital channels, core platforms, card services or customer facing technology environments

·       5 Years’ Experience in leading technology operations teams, vendors, service restoration, major incidents and operational governance

Ideal

·       Post Graduate Degree in Computer Science, Information Systems, Computer Engineering, Network Engineering, Technology Management, Risk Management, Governance or related discipline (NQF Level 8)

·       Advanced Certificate in Information Technology Service Management, Cloud Architecture, Infrastructure Management, Information Technology Governance, Disaster Recovery Management or Business Continuity Management (NQF Level 6)

·       Advanced Certificate in Payment Operations, Change Management, Release Management, Cyber Resilience or Financial Services Risk Management (NQF Level 6)

Advantageous

·       3 Years Experience in cloud infrastructure, database platforms, middleware, application programming interfaces, networks, data centre operations, Job scheduling or monitoring tools

·       3 Years Experience in regulated financial services operations, information technology risk, audit, disaster recovery, operational resilience or compliance environments

·       3 Years Experience in core banking production support, payment systems, switching, card systems, batch processing, interfaces or operational readiness environments

Special Requirements

May be required to provide standby or incident support for critical technology failures, payment incidents, card incidents, major infrastructure changes, integration failures, cloud service issues, database failures, batch failures, disaster recovery tests, audit requests, major incident command or urgent service restoration events.

How to Apply

If you wish to apply and meet the requirements, please forward your Curriculum Vitae (CV) to recruitmentNM@postbank.co.za Please indicate in the subject line the position you are applying for. 

Closing Date 11 November 2026 

Disclaimers

The South African Postbank SOC Limited is committed to the achievement and maintenance of diversity and equity in employment, especially with regard to race, gender and disability. In compliance with the banks employment equity plans, first preference will be given to candidates from designated groups. Correspondence will be limited to short listed candidates only.

If you do not hear from the South African Postbank SOC Limited or its Agent within 3 months of this advertisement, please accept that your application has been unsuccessful. The South African Postbank SOC Limited reserves the right not to fill the positions or to re-advertise the positions at any time.

POPIA provides that everyone has the right to privacy and it includes a right to protection against the unlawful collection, retention, dissemination and use of personal information. By applying for employment you consent to the processing of your personal information with Postbank. Your personal information and any attached text or documentation are retained by Postbank for a period in accordance with relevant data legislation.

HEAD: IT SECURITY

REPORTS TO : General Manager: IT Governance

BUSINESS UNIT : IT

LOCATION : HEAD OFFFICE: PRETORIA

POSITION STATUS : Permanent

POSITION GRADE : D5

Purpose of the Job

The Head: IT Security is responsible for leading the bank’s cyber security, information security, cryptography, security engineering and security operations capability to protect customer information, payment systems, card environments, digital channels, banking platforms and South African Social Security Agency payment services. Define and manage security strategies, standards, controls, monitoring practices and cyber resilience plans to reduce the likelihood and impact of cyber threats, ransomware, insider threats, unauthorised access, identity compromise, privilege abuse, data loss, service disruption and technology compromise. Direct specialist security teams to design, implement and monitor security controls across infrastructure, applications, networks, cloud services, Microsoft 365 services, endpoints, encryption environments, payment and card environments, third party services and user access. Provide the bank’s senior information security authority, incident response leadership, cyber risk reporting and security assurance to maintain regulatory compliance, operational resilience, audit readiness and public confidence in the bank. 

Job Responsibilities

Cyber and Information Security Strategy

·       Define the bank’s cyber and information security strategy to protect critical technology services, customer information and payment environments

·       Own the cyber security strategy, operating model, control roadmap and executive cyber-risk reporting for ransomware, identity compromise, payment-system threats, insider threats and data leakage risk

·       Set security principles, standards and control requirements to align security practices with risk appetite, regulatory obligations and technology governance requirements

·       Develop the security operating model, control roadmap and cyber resilience plan to strengthen prevention, detection, response and recovery capability

·       Review security risks, emerging threats and control maturity to prioritise security improvements and investment decision

·       Report security posture, key risks and improvement progress to governance forums to support informed oversight and accountability

Senior Security Authority and Governance

·       Act as the bank’s senior in house information security authority to provide practical and authoritative security guidance

·       Advise executive leadership, governance structures, risk forums and audit stakeholders on cyber risk, resilience and security investment priorities

·       Define security policies, standards, metrics and reporting routines to support evidence-based decision making

·       Assess material cyber risks, control gaps, residual risks and compensating controls to support risk treatment or risk acceptance decisions

·       Promote security practices that balance risk reduction, operational continuity, customer access and business realities

Security Architecture and Engineering

·       Direct security design requirements across infrastructure, applications, networks, cloud services, endpoints, databases and integration platforms to reduce technology exposure

·       Review solution designs, technical changes, architecture decisions and vendor proposals to confirm alignment with approved security standards before implementation

·       Guide security engineering activities to implement identity, access, network, endpoint, application and data protection controls

·       Validate security configurations and control effectiveness across critical platforms to reduce misconfiguration and unauthorised access risk

·       Support secure technology delivery for banking platforms, payment systems, card environments, digital channels and South African Social Security Agency payment service

Security Operations and Cyber Incident Response

·       Lead security monitoring capability to detect, assess and respond to cyber threats across technology environments

·       Direct investigation of security alerts, vulnerabilities, phishing attacks, privileged account compromise, suspected data loss and ransomware events to contain impact and restore secure operations

·       Lead Security Operations Centre (SOC), Security Information and Event Management (SIEM), Security Orchestration Automation and Response (SOAR), Endpoint Detection and Response (EDR), Extended Detection and Response (XDR), threat monitoring, detection engineering, phishing response, privileged account compromise and post incident lessons learned

·       Develop cyber incident response plans, escalation protocols and playbooks to support timely and coordinated response

·       Coordinate incident response with technology, risk, compliance, legal, communications, vendors and executive stakeholders to manage business and regulatory impact

·       Review incident lessons learned to strengthen security controls, monitoring rules, recovery readiness and response procedures

Identity Privileged Access and Data Protection

·       Direct identity and access management controls to confirm that user access aligns with role requirements, segregation of duties and least privilege principles

·       Oversee privileged access governance, service account control, administrative access review, access monitoring and trusted identity recovery to reduce compromise risk

·       Strengthen data protection controls to reduce the risk of unauthorised disclosure, loss, alteration or misuse of customer and bank information

·       Manage security testing, penetration testing and control assurance activities to identify exploitable weaknesses before they affect operations

·       Track remediation actions for access, identity, data protection and security findings to improve control maturity and reduce residual risk

Cryptography and Key Management

·       Define cryptography standards and key management procedures to protect payment systems, card environments, customer data and sensitive banking transactions

·       Oversee Hardware Security Module administration, encryption controls and key lifecycle management to maintain secure cryptographic operations

·       Monitor privileged access to cryptographic systems to reduce unauthorised access and key compromise risk

·       Validate compliance with payment security, card security, encryption and key management requirements to support secure transaction processing

·       Review cryptographic control exceptions and operational risks to drive corrective action and maintain trust in payment services

Cyber Resilience and Recovery Readiness

·       Direct cyber resilience planning to support secure recovery from ransomware, destructive attacks, data compromise and service disruption

·       Review backup protection, recovery validation, clean restoration procedures, business integrity checks to support safe service restoration, ransomware-oriented recovery controls, backup protection, clean restoration decision-making and business integrity checks after cyber incidents

·       Coordinate cyber recovery planning with infrastructure, cloud, application, database, operations and continuity teams to strengthen recovery readiness

·       Support disaster recovery tests, cyber simulation exercises and recovery validation activities to confirm response capability and evidence readiness

·       Report recovery gaps, resilience risks and remediation progress to governance forums to support informed decision making

Cloud Endpoint and Digital Security

·       Direct cloud, endpoint, email, collaboration platform and digital channel security controls to protect customer facing and productivity environments

·       Review cloud configuration, conditional access, mailbox security, endpoint protection and internet facing platform controls to reduce attack paths

·       Coordinate security monitoring across cloud services, digital channels, card services and critical banking platforms to support risk based protection

·       Track vulnerabilities, misconfigurations and control gaps across cloud and endpoint environments to support timely remediation

·       Support secure adoption of new technology, outsourcing arrangements and cloud services through practical security input

·       Microsoft 365 security, mailbox compromise response, conditional access, collaboration-platform abuse and internet-facing platform hardening

Regulatory Compliance and Security Assurance

·       Monitor security compliance against applicable legislation, regulatory requirements, industry standards and internal policies to support assurance readiness

·       Maintain security evidence, control records and compliance reports to support audit, regulatory and management review processes

·       Coordinate responses to security audit findings, regulatory observations and control weaknesses to support timely closure

·       Engage internal audit, external audit, risk, compliance and regulators on security matters to address findings and improve the control environment

·       Promote secure ways of working across technology teams and third party providers to strengthen accountability for security outcomes

·       Lead Payment Card Industry Data Security Standard (PCI DSS), Payment Card Industry Personal Identification Number Security Requirements (PCI PIN), Protection of Personal Information Act (POPIA), South African Reserve Bank (SARB), Payment Association of South Africa (PASA) related security expectations, internal audit, external audit and Auditor General South Africa (AGSA) related evidence requirements

Third Party Security and Governance Coordination

·       Oversee third party cyber risk across security service providers, cloud providers, payment integrations, vendor connectivity and outsourced security functions

·       Review vendor security controls, service commitments and incident response obligations to support secure external service delivery

·       Challenge vendor performance where recurring incidents, weak controls or poor response quality increase security risk

·       Provide senior security advice into major projects, architecture forums, outsourcing decisions, new technology adoption and cloud migration decisions

·       Communicate security risks, control gaps and remediation priorities clearly to support transparent stakeholder management

Financial Management

·       Compile security budget inputs and forecasts to support planned investment in security tools, services and specialist capability

·       Monitor security expenditure against approved budgets to manage costs within allocated financial parameters

·       Assess security investment options to balance risk reduction, compliance requirements, operational resilience and value for money

·       Track benefits from security initiatives to demonstrate improved control effectiveness and reduced technology risk

People Management

·       Clarify role expectations, priorities and standards for direct reports to align delivery with security objectives

·       Lead performance planning, review and feedback processes to support accountability and deliver

·       Coach and mentor direct reports to build capability in cyber security, cryptography, security engineering, security administration and Hardware Security Module key administration

·       Allocate work, manage capacity and monitor delivery timeframes to maintain effective functional performance

·       Support recruitment, onboarding, development and succession planning to maintain a capable and sustainable security team

·       Address conduct, performance and attendance matters in line with Human Resources policies and labour legislation

Qualifications and Experience

·       Bachelor’s Degree in Computer Science, Information Systems, Cyber Security, Computer Engineering or related discipline (NQF Level 7)

·       Certificate in Cyber Security, Information Security Management, Network Security, Payment Security or Information Technology Governance (NQF Level 6)

·       Leadership Development Programme

·       10 Years Experience in the Information Technology industry

·       8 Years Experience in cyber security, information security, security operations, cyber risk or security engineering

·       5 Years Experience in banking technology, payment systems, card environments, digital channels or regulated financial services security

·       5 Years Experience in leading cyber security teams, security governance forums, cyber resilience planning and incident response activities

Ideal

·       Post Graduate Degree in Computer Science, Information Systems, Cyber Security, Cyber Risk, Technology Governance or related discipline (NQF Level 8)

·       Advanced Certificate in Information Security Management, Cyber Risk Management, Security Architecture, Security Audit or Information Technology Governance (NQF Level 6)

·       Advanced Certificate in Payment Security, Data Protection, Security Operations, Cryptography Management or Information Security Audit (NQF Level 6)

Advantageous

·       5 Years’ Experience in cryptography, Hardware Security Module administration, key management, payment security or card security environment

·       3 Years’ Experience in Payment Card Industry Data Security Standards, Payment Card Industry Personal Identification Number requirements, Protection of Personal Information Act South African Reserve Bank, Payment Association of South Africa or security audit compliance environments

·       3 Years’ Experience in third party cyber risk management, managed security service governance, cyber maturity improvement or security operating model implementation 

Special requirements

May be required to provide standby or incident support for major cyber security incidents, ransomware events, suspected data compromise, payment security incidents, critical system changes, disaster recovery tests, cyber recovery exercises, regulatory reviews or urgent security events

How to Apply

If you wish to apply and meet the requirements, please forward your Curriculum Vitae (CV) to recruitmentNM@postbank.co.za. Please indicate in the subject line the position you are applying for. 

Closing Date 11 November 2026 

Disclaimers

The South African Postbank SOC Limited is committed to the achievement and maintenance of diversity and equity in employment, especially with regard to race, gender and disability. In compliance with the banks employment equity plans, first preference will be given to candidates from designated groups. Correspondence will be limited to short listed candidates only.

If you do not hear from the South African Postbank SOC Limited or its Agent within 3 months of this advertisement, please accept that your application has been unsuccessful. The South African Postbank SOC Limited reserves the right not to fill the positions or to re-advertise the positions at any time.

POPIA provides that everyone has the right to privacy and it includes a right to protection against the unlawful collection, retention, dissemination and use of personal information. By applying for employment you consent to the processing of your personal information with Postbank. Your personal information and any attached text or documentation are retained by Postbank for a period in accordance with relevant data legislation.