From the boardroom to the server room, from the front door to the firewall, WinMad is the single partner that covers your entire security landscape. Cybersecurity, governance, forensics, networking, physical security and training. All under one roof.
Most organisations juggle multiple vendors for security, and the gaps fall in between. WinMad is architected differently. We cover your full security perimeter so nothing gets missed and nothing gets lost between contractors.
From governance frameworks to physical infrastructure, WinMad covers the complete ICT and cybersecurity stack for organisations that take their security seriously.
SOC operations, threat detection, vulnerability management and incident response.
Full lifecycle security operations: monitoring, detection and response, unified with Continuous Threat Exposure Management and Security Assessment.
Governance, risk and compliance programmes across ISO 27001, POPIA, SOC 2 and NIST.
Secure network architecture, firewalls, segmentation and infrastructure.
Digital forensics, evidence handling and post-incident investigation.
Access control, surveillance and site-level protection of critical assets.
Security awareness, phishing simulation and staff capability building.
DLP strategy, classification and controls to keep sensitive data contained.
Discovery, identification, inventory and lifecycle control of your full ICT estate.
Ongoing discovery, prioritisation and validation of exposures across your attack surface, mapped to real business risk.
Vulnerability assessments, penetration testing and security posture reviews against recognised frameworks.
Your network is the backbone of everything else. We design, segment and harden it so that attackers have nowhere to move. From next-generation firewalls to zero-trust segmentation and secure remote access, WinMad builds networks that are resilient by design.
When something goes wrong, evidence matters. Our forensic process preserves the integrity of digital evidence, reconstructs what happened and supports you through disciplinary, legal or regulatory follow-up.
People are your first line of defence. We turn staff from a risk into a control through practical, role-relevant training and realistic phishing simulations that measurably reduce click rates over time.
WinMad delivers across South Africa, the SADC region and international markets. Remote-first delivery combined with on-site capability lets us support clients wherever they operate.
Head office in Johannesburg, serving public and private sector clients nationwide.
Cross-border delivery of cybersecurity, GRC and ICT services across Southern Africa.
Remote engagements and advisory for clients in Africa and beyond.
WinMad is a South African cybersecurity and ICT solutions company serving public and private sector clients across South Africa, the SADC region and internationally. We combine hands-on operational depth with governance and compliance expertise, so security is delivered, not just documented.
Our work spans SOC operations, penetration testing, vulnerability management, OT and ICS security, and full GRC programmes mapped to the frameworks your auditors and regulators expect.
We are building a team that takes security seriously across Africa and beyond. Current openings are listed below. Don't see a fit? Send us your CV anyway.
Monitor, triage and respond to security events. SIEM, threat detection and incident response experience preferred.
Apply NowDeliver governance, risk and compliance engagements across ISO 27001, POPIA and SOC 2. Strong documentation and client-facing skills.
Apply NowWe are always interested in strong cybersecurity and ICT talent. Send your CV and tell us where you fit.
Send CVSubmit your application below. Your details and CV reach our talent team directly through the site — no email client required.
Emailinfo@winmad.co.za · use the form
CareersApply online · careers@winmad.co.za
Phone060 480 3033
LocationJohannesburg, Gauteng, South Africa
CoverageSouth Africa · SADC · International