Cape Town City Centre: Cyber Security Consultant

Key Responsibilities Act as a cyber security advisor to clients, providing strategic guidance across governance, risk, compliance, and “owning” the security programme. Translate technical security issues, risks, and incidents into clear business language for leadership, management, and client stakeholders. Lead or support cyber risk assessments, gap assessments, internal audits, and remediation planning against recognised frameworks and standards. Maintain and improve security governance documentation, including policies, procedures, risk registers, and compliance-related records. Support clients with ISO 27001, privacy, and broader regulatory compliance activities, including audit preparation and ongoing control improvement. Coordinate incident response activities from a consulting perspective, guiding communication, escalation, stakeholder alignment, and post-incident review. Prepare and present client-facing reports, dashboards, and cyber maturity assessments with clear, actionable recommendations. Work closely with internal consulting, infrastructure, and SOC teams to guide security best practice and help drive successful project outcomes. Skills & Experience Mandatory Experience 2 years of experience in cybersecurity, information security, GRC, compliance, or related advisory roles, or Experience working with clients in a consulting, advisory, or customer-facing capacity. Experience supporting ISMS implementation, risk management, internal audits, or compliance programmes. Experience producing professional reports, presenting to stakeholders, and translating technical issues into business impact. Ability to interpret security findings and express them clearly in business terms. Sound judgement and a practical, risk-based approach to problem-solving. Foundational understanding of cloud security, infrastructure, endpoint security, Microsoft 365 security concepts, and managed security services. Ability to work independently while also collaborating effectively with Infrastructure, SOC, and consulting teams. Desirable Experience Experience in managed security services, vCISO engagements, or compliance-driven consulting. Familiarity with GRC platforms, awareness platforms, Microsoft 365 security and compliance features, and SIEM/EDR concepts. Exposure to regulated environments and external certification or assurance audits. Experience supporting phishing awareness, policy uplift, and security culture initiatives. Personal Attributes Professional and credible with clients and senior stakeholders. Commercially aware and able to align security to business outcomes. Confident facilitator and communicator. Detail-oriented while able to see the broader strategic picture. Self-motivated, curious, and committed to continuous learning. Calm and structured under pressure, especially during incidents or high-priority engagements. Strong written and verbal communication skills. Excellent stakeholder management and client engagement capability. Strong organisational skills with the ability to manage multiple client priorities. Qualifications Relevant industry certifications in security, governance, privacy, or risk management Diploma or Degree in Information Security, Computer Science, Information Systems, Risk, Compliance, or a related field experience Desirable CISSP, CISM or working towards a similar certification ISO 27001 Lead Implementer Privacy or compliance-related certifications Project management certification Applications