Information Security and Compliance Officer

SUMMARY:
Our client in Cape Town (Northern Suburbs) is hiring an Information Security & Compliance Officer.

POSITION INFO:
Description:

The Information Security & Compliance Officer is responsible for the operational delivery of the organisation’s information security programme and regulatory compliance obligations. This individual contributor role includes cybersecurity operations, POPIA compliance, IT governance, risk management, and security awareness across the organisation.

Requirements:

• 5-7 years of hands-on experience in information security, cybersecurity engineering, or IT security roles.
• Proven experience in security monitoring, incident response, and vulnerability management.
• Experience with POPIA compliance and IT governance frameworks.
• Experience managing endpoint protection platforms, SIEM systems, and security tooling.
• Exposure to cloud environments (Azure, AWS, GCP) and cloud security practices.
• Working knowledge of ISP operations and procedures is advantageous.
• Strong knowledge of information security principles and best practices.
• Familiarity with threat frameworks such as MITRE ATT&CK.
• Proficiency in Windows OS, Entra ID/Azure AD, and networking fundamentals (TCP/IP, DNS, DHCP).
• Experience with endpoint security and vulnerability management solutions.

• Monitor systems and networks for security threats and suspicious activity
• Investigate and respond to security incidents, including root cause analysis
• Manage security tools such as SIEM and endpoint protection platforms
• Conduct vulnerability scans, risk assessments, and penetration testing
• Support incident response planning and manage live security incidents
• Maintain and improve server, network, and cloud security configurations
• Ensure POPIA compliance and support GDPR-related requirements
• Manage data breach responses and data subject requests
• Maintain security policies, procedures, and compliance documentation
• Track and report on security risks, incidents, and remediation progress
• Produce regular security dashboards and compliance reports
• Monitor logs, alerts, and threat intelligence on a daily basis
• Support disaster recovery testing and security audits
• Liaise with internal teams and vendors to resolve security risks
• Weekly, monthly, and quarterly security reporting and reviews
• Ongoing monitoring of alerts, logs, and access activity
• Continuous improvement of security posture across the organisation

• Ensure continuous monitoring and protection of all IT systems
• Maintain updated vulnerability and incident registers
• Ensure compliance with POPIA and internal security standards
• Provide regular reporting on security status and risks
• Support ongoing improvement of security controls and processes