Re-Advert: Senior Advisor Security Cyber

The Role

As a Senior Advisor Security Cyber at Eskom, you will play a pivotal role in safeguarding South Africa's critical energy infrastructure through advanced cybersecurity expertise. This position sits within the IT Security Services department under the Cyber Security business unit, where you'll be at the forefront of protecting one of the nation's most vital utilities from evolving digital threats. You'll work closely with cross-functional teams including Group Information Technology (IT) and Operation Technology (OT) system owners, as well as various operating units across the organization.

This is a senior advisory role that requires someone who can think strategically about cybersecurity challenges while also implementing practical solutions. You'll be responsible for defining, managing, and continuously improving cloud, application, and data cyber security procedures, standards, and frameworks that support Eskom's ambitious cloud and digital transformation journey. The role offers the opportunity to make a significant impact on national infrastructure security while working with cutting-edge technologies and methodologies in a dynamic, mission-critical environment.

Based at Megawatt Park in Gauteng, you'll be part of a dedicated team of security professionals who understand that protecting South Africa's energy grid requires both technical excellence and collaborative leadership. This position offers the chance to shape the future of cybersecurity at one of Africa's largest utilities while contributing to the reliable delivery of electricity to millions of customers.

What You'll Do

• Define, develop, and maintain comprehensive cybersecurity policies, procedures, standards, and frameworks specifically designed for cloud environments and digital transformation initiatives
• Conduct thorough cybersecurity risk assessments and vulnerability analyses across IT and OT systems, identifying potential threats and developing mitigation strategies
• Provide expert cybersecurity advisory services and consultancy to internal stakeholders, guiding decision-making on security-related matters
• Interface regularly with Group Information Technology (IT) and Operation Technology (OT) system owners to ensure security requirements are integrated into all technology initiatives
• Collaborate closely with operating units across Eskom to implement and monitor cybersecurity measures tailored to their specific operational needs
• Design and conduct comprehensive cybersecurity training programs and awareness campaigns for employees at all levels of the organization
• Monitor and analyze emerging cybersecurity threats, trends, and technologies, recommending proactive measures to enhance Eskom's security posture
• Lead incident response activities when cybersecurity events occur, coordinating with relevant teams to minimize impact and prevent recurrence
• Ensure compliance with industry standards, regulatory requirements, and best practices related to cybersecurity in the energy sector
• Develop and maintain security documentation, reports, and metrics to demonstrate the effectiveness of cybersecurity programs
• Participate in cybersecurity governance committees and provide regular updates to senior management on security initiatives and risk status
• Stay current with cybersecurity certifications, industry developments, and emerging technologies to maintain expertise and drive continuous improvement

What We're Looking For

• Bachelor's degree, B.Tech, or Advanced Diploma in Information Technology, Information Systems, Computer Science, or Computer Systems at NQF Level 7 with 360 credits
• Specific professional experience in information security or cybersecurity disciplines with demonstrated expertise in cloud security environments
• Strong understanding of cybersecurity frameworks such as ISO 27001, NIST, or similar industry standards
• Proven experience in risk assessment methodologies and cybersecurity risk management practices
• Excellent knowledge of cloud security principles, technologies, and best practices across major cloud platforms
• Strong analytical and problem-solving skills with the ability to think strategically about complex security challenges
• Excellent communication and presentation skills, with the ability to explain technical concepts to non-technical stakeholders
• Experience in developing and delivering cybersecurity training and awareness programs
• Understanding of IT and OT convergence in industrial environments, particularly in utility or critical infrastructure settings
• Strong project management skills and the ability to work effectively in cross-functional teams

Nice to Have

• Professional cybersecurity certifications such as CISSP, CISM, CISSP, or cloud-specific certifications (AWS Security, Azure Security, etc.)
• Experience working in the energy, utilities, or critical infrastructure sectors
• Knowledge of SCADA systems, industrial control systems, and operational technology security
• Experience with cybersecurity incident response and digital forensics
• Understanding of South African cybersecurity regulations and compliance requirements
• Advanced degree or postgraduate qualifications in cybersecurity or related field

What We Offer

• Competitive market-related salary package commensurate with experience and qualifications
• Comprehensive medical aid and healthcare benefits for you and your family
• Retirement fund contributions and long-term financial security benefits
• Professional development opportunities including training, certifications, and conference attendance
• Opportunity to work on nationally significant projects that impact millions of South Africans
• Collaborative work environment with access to cutting-edge cybersecurity technologies and tools
• Performance-based incentives and recognition programs
• Work-life balance initiatives and employee wellness programs

How to Apply

To apply for this position, please submit your application through our online careers portal by clicking the Apply button. You'll need to create a candidate profile and upload your comprehensive CV along with supporting documents. Please ensure your application clearly demonstrates how your experience aligns with the requirements outlined in this job description.

Applications must be submitted by 30 March 2026. Only candidates who meet the minimum requirements will be contacted for further consideration. The recruitment process will include multiple interview stages and may include technical assessments to evaluate your cybersecurity expertise. Successful candidates will be subject to background verification and security clearance processes given the sensitive nature of the role.

About the Company

Eskom is South Africa's primary electricity supplier, generating approximately 95% of the electricity used in South Africa and approximately 45% of the electricity used in Africa. As a state-owned enterprise, we play a crucial role in supporting economic growth and improving the quality of life for all South Africans. Our mission is to provide electricity in an efficient and sustainable manner, while our vision is to be a world-class electricity company supporting development.

At Eskom, we believe in the power of our people to drive transformation and innovation. We offer a dynamic work environment where employees can contribute to meaningful projects that have a direct impact on the nation's development. Our commitment to diversity, inclusion, and professional development creates opportunities for personal growth while working on some of the most challenging and rewarding projects in the energy sector. Join us in our mission to power South Africa's future while building your own career in a company that values excellence, integrity, and innovation.