Cape Town City Centre: Information Security and Compliance Officer

About the Role

The Information Security & Compliance Officer is a critical role within the organisation, responsible for delivering operational information security and regulatory compliance obligations. The successful candidate will be an experienced individual contributor with expertise in information security, cybersecurity engineering, or IT security roles.

Key Responsibilities

• Monitor systems and networks for security threats and suspicious activity
• Investigate and respond to security incidents, including root cause analysis
• Manage security tools such as SIEM and endpoint protection platforms
• Conduct vulnerability scans, risk assessments, and penetration testing
• Support incident response planning and manage live security incidents
• Maintain and improve server, network, and cloud security configurations
• Ensure POPIA compliance and support GDPR-related requirements
• Manage data breach responses and data subject requests
• Maintain security policies, procedures, and compliance documentation
• Track and report on security risks, incidents, and remediation progress
• Produce regular security dashboards and compliance reports
• Monitor logs, alerts, and threat intelligence on a daily basis
• Support disaster recovery testing and security audits
• Liaise with internal teams and vendors to resolve security risks

Requirements

• 5-7 years of hands-on experience in information security, cybersecurity engineering, or IT security roles
• Proven experience in security monitoring, incident response, and vulnerability management
• Experience with POPIA compliance and IT governance frameworks
• Experience managing endpoint protection platforms, SIEM systems, and security tooling
• Exposure to cloud environments (Azure, AWS, GCP) and cloud security practices
• Working knowledge of ISP operations and procedures is advantageous
• Strong knowledge of information security principles and best practices
• Familiarity with threat frameworks such as MITRE ATT&CK
• Proficiency in Windows OS, Entra ID/Azure AD, and networking fundamentals (TCP/IP, DNS, DHCP)
• Experience with endpoint security and vulnerability management solutions

Qualifications

No specific qualifications mentioned.

Salary & Benefits

Salary information not provided.