A purpose-driven Cape Town organisation is looking for a Cybersecurity and Risk Specialist to strengthen its security, risk and governance.
You’ll help identify and manage technology and information security risk, support incident response and compliance, and build security into digital projects and supplier relationships.
What you’ll do
Identify and assess technology and information security risks, and maintain risk registers and security documentation
Support security policies, procedures, controls, audits and remediation
Assist with POPIA and information security compliance
Monitor security alerts and vulnerabilities, and support Microsoft 365 security including MFA and Conditional Access
Assist with cybersecurity incident management and escalation
Assess new technologies, cloud and SaaS solutions for security risk
Carry out supplier and third-party security assessments
Support awareness training, phishing campaigns, business continuity and DR testing
What you’ll need
A diploma or degree in Information Security, Cybersecurity, IT, Computer Science or similar (NQF 6 to 7)
At least 3 years in cybersecurity, information security, technology risk, IT governance or compliance
A practical understanding of information security, risk management and governance
An understanding of POPIA and information protection principles
Clear communication with technical and non-technical people, and discretion with sensitive information
Nice to have
Microsoft 365 security: MFA, Conditional Access or Defender
ISO 27001, NIST or CIS frameworks
Vulnerability management, audits, third-party risk, business continuity or DR
What’s on offer
A broad security and risk role with real influence
A people-first, purpose-driven culture
Hybrid working
Cape Town. Hybrid. Permanent.