ICT Security Administrator

The South African Weather Service SAWS · Centurion, Gauteng

Stop applying one at a time.

JobAlertsZA auto-applies to South African jobs like this one for you, overnight. Upload your CV once — we do the applying.

Job summary

The ICT Security Administrator is responsible for the administration, monitoring, implementation, and operational support of cybersecurity controls, technologies, and processes across the South African Weather Service.
The role supports the Information Security Specialist in protecting the confidentiality, integrity, and availability of information assets through security operations, vulnerability management, identity and access management, incident response, compliance monitoring, cyber resilience activities, and cybersecurity awareness initiatives.
The role further supports regulatory compliance, audit requirements, security reporting, and continuous improvement of the organisation's cybersecurity posture.

Strategy and Policy Compliance

Support the implementation and execution of the ICT Security Strategy.
Monitor compliance with POPIA, the Cybercrimes Act, ISO 27001, King IV, and applicable government regulations.
Assist with the review, maintenance, communication, and implementation of information security policies, standards, procedures, and guidelines.
Support internal and external audit activities by providing required information, documentation, and audit evidence.
Maintain cybersecurity risk, compliance, and audit registers.
Track audit findings, corrective actions, and remediation activities to closure.
Support cybersecurity risk assessments and monitor mitigation actions.

Security Operations and Threat Management

Administer and monitor cybersecurity technologies, including firewalls, endpoint protection, anti-malware solutions, intrusion detection and prevention systems, secure email gateways, SIEM platforms, and cloud security tools.
Monitor and analyse security alerts, logs, and events generated by security systems.
Investigate suspicious activities and security events in accordance with approved procedures.

Identity and Access Management

Administer Active Directory, Microsoft Entra ID, and related identity management platforms.
Provision, modify, suspend, and revoke user access based on approved requests.
Perform user onboarding, transfer, and termination activities in accordance with approved procedures.
Manage and maintain privileged user accounts and access records.
Administer Multi-Factor Authentication MFA and Conditional Access policies

Vulnerability and Security Configuration Management

Conduct approved vulnerability scans on servers, endpoints, network devices, cloud services, and applications.
Monitor, record, and track identified vulnerabilities and remediation actions.
Support vulnerability assessments and remediation activities across ICT environments.

Business Continuity and Cyber Resilience

Security Awareness and Training

Cybersecurity Reporting

Produce monthly operational cybersecurity reports and dashboards.
Compile and maintain cybersecurity performance statistics and metrics.
Report on security incidents, vulnerabilities, patch compliance, access reviews, awareness activities, and remediation progress.
Maintain cybersecurity records, evidence repositories, and reporting databases.
Monitor and report cybersecurity operational trends and recurring issues.

National Diploma in information technology, Computer Science, Cybersecurity, Information Systems or related field, Degree will be an added advantage.
Cybersecurity certifications often advantageous or required, such as:
Microsoft SC-200 Security Operations Analyst
Microsoft SC-300 Identity and Access Administrator
CompTIA CySA+
Certified Ethical Hacker CEH
Fortinet NSE/FortiGate Certification

Minimum 3 years' experience in ICT infrastructure, ICT operations, cybersecurity, systems administration or network administration.

Closing Date: 09 September 2026