Protect the technology. Secure the data. Stay one step ahead of the threats!

Are you passionate about cybersecurity, risk management and building a safer digital environment? Do you enjoy identifying vulnerabilities, challenging security risks and making sure that people, systems and business operations are protected?

We're looking for an experienced Security and Compliance Manager to take ownership of the organisation's information security and compliance framework.

This is an exciting opportunity for a hands-on security professional who can bring together technology teams, business stakeholders and external partners to strengthen security, manage risk and ensure regulatory compliance.

You'll play a key role in shaping security standards, monitoring compliance, managing security incidents and ensuring that security remains everyone's responsibility.

Requirements

• 7 - 10 years’ experience in IT, of which a minimum of 5 years in information security, IT risk, or IT compliance roles.
  
• 3+ years in a lead or management capacity, coordinating security across multiple IT teams without direct line authority.
  
• Proven experience implementing and maturing a security control framework (ISO/IEC 27001, NIST CSF, or CIS Controls).
  
• Experience supporting POPIA compliance programmes and coordinating internal and external IT audits.
  
• Experience securing hybrid environments: AWS and/or Azure, Microsoft 365, on-premises networks, and endpoints.
  
• Proven experience managing security and compliance obligations of external partners, managed service providers, and outsourced development teams.
  
• Exposure to retail, e-commerce, or payment environments (advantageous).
  

• National Senior Certificate (Grade 12).
  
• Bachelor’s degree in information technology, Computer Science, Information Security, or a related field.
  
• At least one recognised security certification: CISSP, CISM, or ISO/IEC 27001 Lead Implementer / Lead Auditor (CompTIA Security+ as a minimum).
  
• CISA or CRISC (advantageous).
  
• Cloud security certification, e.g. AWS Certified Security  -  Specialty or Microsoft AZ-500 / SC-100 (advantageous).
  
•  ITIL V4 Foundation.