Information Security and Cybersecurity Services for Postbank.
Wilfred Vusi Maditsi
In plain English
Postbank is seeking a service provider for comprehensive Information Security and Cybersecurity services for three years. Bidders must comply with SARB, PASA, PCI DSS, POPIA, and ISO/IEC 27001 standards.
Always check the official documentDescription
Postbank (SOC) Ltd invites bids for the provision of comprehensive Information Security and Cybersecurity services. The successful service provider will act as a strategic partner to secure the bank's infrastructure, including its Security Operations Centre, endpoint protection, network security, and identity management. The contract spans a period of three years. Key deliverables include 24/7 threat monitoring, incident response, vulnerability management, and ensuring compliance with banking regulations like ISO 27001 and PCI DSS. Work will be conducted across Postbank’s environments, with all data required to remain within South African borders. The closing date for submissions is 18 September 2026.
What you need to qualify
- CSD registration — Registration on the Central Supplier Database — required to do business with government.
- Tax clearance — A valid SARS tax compliance status (PIN) showing your tax affairs are in order.
- Other registration — An industry registration the tender requires (e.g. PSIRA, NHBRC, a professional or trade licence).
Full requirements
- Valid SARS Tax Compliance Status (TCS) PIN
- Registered on the Central Supplier Database (CSD)
- Permanent operational presence in South Africa
- Professional Indemnity Insurance of at least R20 million
- Relevant industry certifications (ISO 27001, PCI DSS, CISSP, CEH, or OSCP)
- Proven cybersecurity experience within the financial sector
- Certified CISO and CISSP personnel with vetted background checks
Contact & how to apply
Name: Wilfred Vusi Maditsi
Email: Vusi.Maditsi@Postbank.co.za
Phone: 076-706-9269
How to apply: Applications must be submitted via email to RFP@PostBank.co.za by 11:00 am on the closing date of 18 September 2026.
Related tenders
Procurement of ITSM and Case Management Solution for Postbank.
Postbank seeks a service provider to supply, configure, and deploy an IT Service Management tool and Case Management solution with a five-year support and maintenance agreement. The project involves data migration, integration with existing systems, and implementation of automation and AI capabilities. It will be executed over 6 to 24 months, including system deployment, user training, and documentation. Compliance with POPIA and SARB regulations is required.
Appointment of Service Provider for Managed Information Security Services
BANKSETA seeks service providers for managed information security services, including supplying network equipment like switches and access points, and providing network monitoring and redesign services across national offices. Deliverables include a network diagram within six months, ongoing monitoring, and regular security and equipment health reports. The contract is valid until 30 April 2030, requiring a qualified Team Leader and Network Security specialist.
Maintenance and Development of SafetyWeb Banking System
The National Treasury seeks a service provider for the maintenance, support, enhancement, and further development of the SafetyWeb Banking System over a three-year period. The system processes transactions exceeding R400 billion monthly and requires application maintenance, system enhancements, database administration, and technical infrastructure support. Deliverables include a central call logging system, secure source code management, and regular operational reporting. The provider must ensure system availability and support during business hours, with arrangements for urgent incidents. Intellectual property remains with the National Treasury. Submissions close on 04 September 2026 at 11:00 AM.
Provision of Transactional Banking Services for SABC.
The South African Broadcasting Corporation (SABC) seeks a partner for transactional banking services over ten years. The scope includes cash management, electronic banking, batch processing, and foreign payment services. The provider must support SAP ECC6 integration and offer branch coverage across South Africa and Africa. Deliverables include internet-based payment facilities, DebiCheck services, and working capital facilities. A dedicated team, including a relationship manager and legal expert, is required. Services will be nationwide across SABC operations.
Service Provider for Data Backup & Cloud Protection.
ICASA seeks a service provider for integrated offsite data backup and cloud data protection services over 5 years. Responsibilities include managing backups, disaster recovery testing, and cyber recovery for ICASA's infrastructure. Key tasks involve migrating 70TB of data, daily monitoring, monthly reporting, and providing technical staff. The solution must support 100TB of raw data with encryption and annual growth. Work will be conducted at ICASA's Centurion facilities. Submissions close on 07 September 2026 at 11:00.
Assessment of PSETA's Information Security Systems.
The Public Service Sector Education and Training Authority (PSETA) seeks a service provider to assess its information security systems in alignment with the ISO 27001:2022 standard. The project includes evaluating current security controls, performing a gap analysis, and supporting ISO certification. It will be conducted in Pretoria over eight months. Bidders must submit a project plan, hourly rates, and proof of experience in security assessments. A compulsory briefing session is required, and the tender is valid for 120 days from the closing date.