Hospitality

Head Of It

Lexdan Select·Johannesburg, Gauteng, south-africa·FULL_TIME
HospitalitydirectorFULL_TIME
-Closes 8 Jan 2027

The role will focus on: Align IT Strategy: Formulate and execute a long-term IT strategy Governance Frameworks: Enforce corporate governance by maintaining and aligning operations with industry frameworks Security & Resilience: Implement best-practice security policies for data and systems, ensure system resilience Technology & Innovation: Drive digital transformation, IoT initiatives, and platform integrations (specifically around AI) Service Provider Oversight: Accountable for the high-level performance of external IT service providers and vendors Requirements: minimum of 10 years experience experience in property or financial services experience in implementing AI important for role

At a glance

Company

Lexdan Select

Location

Johannesburg, Gauteng, south-africa

Employment

FULL_TIME

Experience

director

Valid until

January 8, 2027

Created

November 10, 2026

More opportunities

Similar roles you might like

Social Media & Content Manager

Kontak Recruitment

Eastern Cape, south-africa

full-time

A fast-growing FMCG business is building a multi-brand portfolio across vaping, vehicle air care and other categories. The Social Media & Content Manager will manage the brands' social channels, scheduled marketing emails and AI customer responder, creating and publishing content while growing audience engagement and tracking results. The role will also prepare the social accounts and launch content for a new vehicle air fragrance brand ahead of its planned Q1 2027 South African launch. Based in Port Elizabeth, the successful candidate will work closely with the Brand & Trade Marketing Manager, Designer, Commercial Operations Manager and e-commerce assistant. Minimum Requirements: Matric, plus a diploma, degree or recognised certificate in marketing, communications, journalism, digital media or a related field; equivalent proven experience will also be considered. At least three years' hands-on social media management experience for a brand or business, including at least one year personally owning the content calendar and publishing across three or more platforms. A portfolio of brand content personally created, with reach, engagement and follower results. Experience personally managing comments, direct messages, complaints and an escalated or negative situation for a brand. Experience coordinating creator or influencer campaigns, including briefs, content approval, disclosure and results tracking. Hands-on experience administering Meta Business Suite or Business Manager and TikTok business accounts, including user roles, asset ownership and two-factor authentication. Short-form video shooting and editing skills, plus confident copywriting. Experience running scheduled email marketing for a brand and reporting on the results. Ability to interpret native platform and email analytics and prepare monthly reports in Excel or Google Sheets, including UTM-tracked traffic. Clear written English and the ability to write in more than one brand voice. Willingness to apply age-restriction and advertising rules to vaping content, even where this limits reach. Acceptance that all accounts, credentials and content belong to the company and must be kept in company systems and handed over when requested or upon exit. Based in Port Elizabeth and able to work office-based and cover an evening and weekend monitoring rota when required. Duties and Responsibilities: Plan and manage a monthly social content calendar for each brand and platform, including post dates, formats, copy, creative source and campaign links. Submit calendars for approval by the 20th of the preceding month and follow the approval process for scheduled, campaign, promotional and price-led content. Create, shoot, edit, schedule and publish copy, short-form video, product photography and stories across Instagram, Facebook, TikTok, LinkedIn and any additional platforms. Maintain an organised, dated content library that records published assets and their usage rights. Brief the Designer on new artwork and template adaptations within the required lead times. Administer the company's social, business-manager and advertising accounts, keeping credentials in the company password manager and maintaining two-factor authentication and an access register. Give colleagues, agencies and freelancers access appropriate to their work; revoke access when a person or supplier leaves and complete quarterly access audits. Secure social media handles for new brands and markets ahead of launch. Write and apply community management standards, including brand tone, response times, reply templates, moderation rules and escalation routes. Monitor comments, direct messages and website chat; route order, delivery and refund queries to the e-commerce assistant and escalate product safety, legal, media or reputational concerns through the agreed process. Monitor audience sentiment, identify negative spikes, pause scheduled posts when needed and agree public responses with the relevant managers before posting. Apply platform and age restrictions to vaping content, including removing content that breaches platform rules and avoiding sales conversations with users who appear underage. Identify and vet creators, prepare written briefs, coordinate agreements and approve content before it goes live. Check sponsored content for required disclosure, track creator deliverables and results, and ensure vaping-related creator activity follows the applicable platform restrictions. Plan and send scheduled marketing emails using company-owned lists and platforms. Maintain recorded consent, an unsubscribe option and age verification for vaping-related email contacts. Manage the AI responder's knowledge base, tone, rules and handover triggers; update it within one business day of changes to prices or policies. Review at least 25 AI conversations each week, record errors and update the knowledge base to address them. Prepare reply templates and escalation guidance for the e-commerce assistant, provide training and spot-check replies. Report monthly on audience growth, reach, engagement, content performance, response times, creator activity, email and AI inbox results, and social- and email-driven traffic and orders. Use UTM parameters and creator tracking codes to help attribute traffic and orders. Propose quarterly social, creator, paid and email campaign budgets for approval, and manage approved paid social within the authorised budget and on permitted platforms. Keep weekly calendar status updates and align content with the brand, trade and e-commerce promotional calendars.

6 days ago

Cloud Engineer

Kaelo

Gauteng, south-africa

full-time

Job Description required for ISO 27001 and internal audit. Cost Management & Optimisation Track and report spend across all cloud providers and hosting by workload and department. Monitor consumption against budget and alert on variance before it becomes material. Implement optimisation, including rightsizing, reserved instances and committed-use discounts, storage tiering and decommissioning of unused resources. Compare the cost of running workloads in public cloud, with independent providers and in co-location, and recommend the most cost-effective placement. Alignment, Reporting & Escalation Align work to, and execute, the direction and strategy set by the IT Executive. Communicate progress and escalate issues and risks to the IT Executive, through the Head of IT where appropriate, promptly and transparently. Qualifications Bachelor's degree or national diploma in Computer Science, Information Systems, Engineering or a related field. Microsoft Azure Administrator Associate (AZ-104) or Google Associate Cloud Engineer required; Azure Solutions Architect Expert (AZ-305) or Google Professional Cloud Architect advantageous. Experience Essential Minimum 5 - 7 years' infrastructure experience, including at least 3 years engineering and operating public cloud environments. Hands-on experience with Microsoft Azure and working experience of Google Cloud Platform. Experience managing virtualised servers in data centres or co-location facilities alongside cloud environments. Experience implementing infrastructure as code (Terraform preferred for multi-cloud, or Bicep). Experience designing and testing backup and disaster recovery for business-critical systems. Scripting ability (PowerShell, Bash, Azure CLI or gcloud). Preferred Experience operating a multi-cloud environment, including migrating workloads between providers. Experience with independent or regional cloud service providers and co-location facilities in South Africa. Experience with cloud cost management or FinOps practice. Experience in a regulated environment, or exposure to ISO 27001, CIS or NIST controls. Technical Competencies Microsoft Azure Compute, Storage, Networking & Entra ID Google Cloud Platform Compute, Storage, Networking & IAM Independent Cloud Service Providers & Co-located Hosting Server Virtualisation (VMware, Hyper-V) Multi-Cloud Networking, Firewalls & Private Interconnects Infrastructure as Code (Terraform, Bicep) Workload Placement & Migration Backup, Disaster Recovery & Cross-Provider Recovery Monitoring & Logging across Providers Cloud Security Posture (Azure Policy, Defender for Cloud, Security Command Center) Multi-Provider Cost Management & FinOps Scripting (PowerShell, Bash, Azure CLI, gcloud) Core Competencies Reliability Focus designs for failure and proves recoverability rather than assuming it. Commercial Judgement places workloads where cost, performance and risk are best balanced. Security Awareness builds secure by default rather than remediating later. Problem Solving diagnoses infrastructure issues methodically across providers and under pressure. Ownership & Accountability owns the availability of the platforms the organisation depends upon. Key Performance Indicators (KPIs) Availability of services hosted across all cloud providers and co-located data centres against agreed service levels. Backup success rate and successful restore test results. Disaster recovery test outcomes against defined recovery time and recovery point objectives. Spend across all providers against budget, and savings delivered through workload optimisation. Secure configuration and policy compliance across providers, and remediation of findings. Delivery of workload migrations against plan. Proportion of infrastructure provisioned through code rather than manual configuration. Regulatory, Risk & Information Security Responsibilities Comply with POPIA in the handling of personal and special personal information, including member health information, and with the Cybercrimes Act, reporting any suspected unlawful access or compromise without delay. Adhere to Kaelo information security policies and the frameworks the organisation aligns to, including FSCA Joint Standard 2 of 2024, ISO/IEC 27001, the CIS Controls and the NIST Cybersecurity Framework. Maintain the evidence required to support the ISMS and internal, external and certification audits within the area of responsibility. Escalate security incidents, control weaknesses and operational risks promptly, and complete all mandatory compliance and awareness training.

14 days ago

Security Engineer (cyber Security & Grc)

Kaelo

Gauteng, south-africa

full-time

Job Description Role Purpose The Security Engineer is Kaelo's dedicated cyber security capability. Reporting to the Head of IT, the role combines hands-on engineering of security controls across the technology estate with the governance, risk and compliance work required to evidence those controls to regulators, auditors and customers. A significant part of the role is security assurance in both directions: completing the security questionnaires that customers send to Kaelo, assessing Kaelo itself and its vendors, and working with internal teams or the vendor concerned to close the gaps found. The incumbent also creates and maintains the Information Security Management System (ISMS) supporting Kaelo's pursuit of ISO 27001 certification, under the direction of the IT Executive, and supports alignment to FSCA Joint Standard 2, POPIA, the Cybercrimes Act, the CIS Controls and the NIST Cybersecurity Framework. Key Responsibilities Security Engineering & Control Implementation Implement, configure and maintain technical security controls across endpoints, servers, cloud, network and identity. Operate endpoint detection and response, email security, web filtering and data loss prevention tooling. Harden systems against CIS Benchmarks and maintain secure baseline configurations across the estate. Work with the Cloud Engineer to apply security controls in the Cloud and co-location environments. Identity & Access Management Maintain multi-factor authentication, conditional access and privileged access controls, enforcing least privilege. Run periodic user access reviews and retain the evidence these produce. Ensure joiner, mover and leaver processes are enforced and evidenced. Vulnerability Management, Monitoring & Incident Response Run vulnerability scanning, triage and remediation tracking, and co-ordinate penetration tests and the closure of their findings. Monitor security alerts and logs, triage events and escalate in line with the incident response plan. Support the response to security incidents, including containment, recovery and post-incident review, under the direction of the IT Executive and as executed by the Head of IT. Support statutory notification obligations, including POPIA breach notification and reporting under the Cybercrimes Act. Security Questionnaires & Third-Party Assurance Complete security questionnaires received from customers and prospective customers, providing accurate responses and supporting evidence on Kaelo's behalf. Maintain a library of approved standard responses, policies and evidence so that questionnaires are answered consistently and quickly. Issue security questionnaires to Kaelo's vendors and service providers, assess the responses and rate the risk. Self-assess Kaelo against its own policies and the frameworks it aligns to, identifying control gaps. Work with internal teams or the relevant vendor to agree remediation of gaps and track it through to closure. ISMS, Governance & Compliance Maintain the ISMS under the direction of the IT executive, including the risk register, risk treatment plan and Statement of Applicability. Implement and evidence Annex A controls, and maintain the evidence required for internal audit and ISO 27001 certification audits. Support control mapping and gap assessment against FSCA Joint Standard 2, the CIS Controls and the NIST Cybersecurity Framework. Maintain the information security policy set and support POPIA compliance in partnership with the Information Officer. Awareness, Resilience & Reporting Run the security awareness programme, including phishing simulation. Contribute to business continuity and disaster recovery planning from a cyber resilience perspective. Report on security posture, questionnaire activity, vendor risk and gap remediation to the Head of IT and IT executive. Alignment, Reporting & Escalation Align work to, and execute, the direction and strategy set by the IT Executive. Communicate progress and escalate issues and risks to the IT Executive, through the Head of IT where appropriate, promptly and transparently. Qualifications Qualifications Bachelor's degree or national diploma in Computer Science, Information Systems, Information Security or a related field. Recognised security certification such as CompTIA Security+, CySA+ or Microsoft SC-200/SC-300; CISSP, CISM or ISO 27001 Lead Implementer advantageous. Experience Essential Minimum 5 years' experience in information or cyber security, with hands-on technical depth. Experience implementing and operating technical security controls across endpoint, network, cloud and identity. Experience completing or assessing third-party security questionnaires and tracking remediation of the gaps found. Practical exposure to ISO 27001, the CIS Controls or the NIST Cybersecurity Framework. Experience with vulnerability management and security monitoring. Working knowledge of POPIA and its application to security controls. Preferred Exposure to an ISO 27001 certification or surveillance audit. Experience in financial services, insurance or healthcare, and familiarity with FSCA Joint Standard 2. Experience with Microsoft security tooling (Defender, Sentinel, Entra ID). Scripting ability for security automation and evidence collection. Technical Competencies Security Control Implementation across Endpoint, Network, Cloud & Identity Security Questionnaire Completion & Evidence Management Vendor Security Assessment & Third-Party Risk Control Gap Assessment & Remediation Tracking ISO/IEC 27001 ISMS Operation & Annex A Controls FSCA Joint Standard 2, CIS Controls & NIST CSF POPIA & Cybercrimes Act Application Identity, Access & Privileged Access Management Vulnerability Management Security Monitoring & Incident Response Security Awareness Programme Delivery Core Competencies Judgement distinguishes real risk from theoretical risk and prioritises accordingly. Integrity represents Kaelo's security position accurately to customers, auditors and management. Clear Communication writes precise questionnaire responses and explains gaps plainly to vendors and internal teams. Influence secures cooperation for remediation without formal authority over those implementing it. Ownership & Accountability drives findings to closure rather than to a register. Key Performance Indicators (KPIs) Turnaround time and accuracy of customer security questionnaire responses. Proportion of in-scope vendors assessed, and vendor gaps remediated within agreed timeframes. Closure of gaps identified in Kaelo's self-assessments. Currency of the ISMS risk register, risk treatment plan and Statement of Applicability. Vulnerability remediation within agreed service levels by severity. Closure rate of penetration test and audit findings. Awareness programme completion and phishing simulation results. Regulatory, Risk & Information Security Responsibilities Comply with POPIA in the handling of personal and special personal information, including member health information, and with the Cybercrimes Act, reporting any suspected unlawful access or compromise without delay. Adhere to Kaelo information security policies and the frameworks the organisation aligns to, including FSCA Joint Standard 2 of 2024, ISO/IEC 27001, the CIS Controls and the NIST Cybersecurity Framework. Maintain the evidence required to support the ISMS and internal, external and certification audits within the area of responsibility. Escalate security incidents, control weaknesses and operational risks promptly, and complete all mandatory compliance and awareness training.

14 days ago

It Manager

Truevo

Remote, south-africa

Full Time

Purpose of the Role Reporting directly to the Head of IT, the IT Manager will oversee, evolve, and secure our core corporate IT infrastructure, platforms, and support services. Operating within a highly regulated fintech and payments environment, you will step beyond day to day firefighting to provide strategic technical leadership, architectural oversight, and rigorous vendor governance. This is a hybrid leadership and hands on role. You will manage a distributed, remote first infrastructure footprint spanning Europe and South Africa, directly leading a remote Infrastructure Operations Engineer in South Africa with an eye toward future team expansion in South Africa and Malta. You will balance long term modernization with operational excellence, ensuring our internal systems are scalable, compliant, and highly resilient. Key Responsibilities Strategic Leadership & Infrastructure Governance Technical Direction: Own the internal IT infrastructure architecture, roadmap planning, and modernization strategies to align with company growth. Team Leadership & Scaling: Manage, mentor, and develop the Infrastructure Operations Engineer. Establish KPIs, manage performance, and design the operational structure for future team expansion. Risk & Security Posture: Act as the ultimate technical authority for internal IT security hardening, access controls, patch management, and critical risk mitigation approvals. Vendor & Cost Optimization: Drive vendor strategy, negotiate service contracts, and optimize infrastructure spend across tooling, licensing, and data centre footprints. Core Infrastructure & Data Centre Operations Data Centre Ownership: Supervise our physical and virtual footprint at the Malta Data Centre utilizing our Malta third party vendor. Fintech Applications Management: Oversee the administration, upkeep, and compliance monitoring of mission critical financial frameworks including CESOP, SWIFT, SEPA and BOL. Virtualization & Systems: Administer and optimize core HyperVisors, Active Directory/Domain structures, and overall server health. Network & Security Fabric: Maintain advanced network configurations, firewalls, corporate VPN services, and physical integrations (CCTV and Alarm systems). Operational Momentum & Availability Incident Ownership: Serve as the final escalation point and incident commander for critical internal IT and infrastructure service disruptions. Business Continuity: Design, test, and implement robust High Availability (HA), Disaster Recovery (DR), and backup strategies using tools like Acronis. Monitoring & Visibility: Oversee the comprehensive active monitoring framework (Checkmk) tracking certificate expirations, server metrics, network health, and automated alerts. Process Automation: Partner with your report to eliminate operational bottlenecks by automating routine workflows via Jira, scripts, and internal tooling. Compliance & Cross-Functional Engagement Regulatory Remediation: Drive regular infrastructure audits and lead technical execution for PCI-DSS remediations and Security/Risk assessment requests. Cross Border Collaboration: Seamlessly manage internal IT services (onboardings, offboardings, hardware lifecycle management via Snipe-IT) across a remote European and South African workforce. Requirements Experience & Qualifications Industry Expertise: 6 to 8+ years of experience in IT Systems Administration and Infrastructure, with at least 2+ years in a Team Lead or Managerial capacityideally within Payments, FinTech, or highly regulated financial spaces. Technical Breadth: Proven experience managing data centre hardware, virtualization technologies (HyperVisors), corporate networking (Firewalls, VPNs), and cloud spaces (AWS administration). Fintech Literacy: Previous exposure to or hands on management of highly secure processing environments or financial message environments (SWIFT, SEPA, regulatory reporting ecosystems). Location & Presence: Fully remote opportunity. Proven capability to manage multi-site infrastructure and support remote team members and IT hardware across various international locations. Skills & Attributes Strategic Thinker, Practical Doer: Equal capability to design a 3 year modernization roadmap and dive into complex multi system troubleshooting alongside your engineer. Operational Rigor: Deep commitment to eliminating single points of failure through standard operating procedures, clean runbooks, and thorough documentation. Communication & Collaboration: Ability to translate complex infrastructure dependencies and security risks into clear business metrics for the Head of IT and cross functional stakeholders. Nice to Have / Advantage Advanced Compliance: Prior experience directly facilitating technical evidence gathering for audits. Project Management: Proven experience utilizing Agile frameworks Jira/Confluence to track infrastructure projects and lifecycle migrations. Originally posted on Himalayas

16 days ago