Please note that our Terms & Conditions and Privacy Notice are applicable.
1
ENVIRONMENT:A secure e-Signature platform based in Cape Town is seeking a Security & Compliance Manager who is responsible for owning and operating the company’s information security and compliance posture. This includes implementing and maintaining ISO/IEC 27001, handling customer security reviews, managing audits, and ensuring security controls are practical, effective, and aligned with a modern cloud-native SaaS environment.This is a hands-on role, suited to someone comfortable working closely with engineering, product, and leadership. DUTIES:Information Security Management (ISO 27001)Own the ISO/IEC 27001 ISMS, including:Risk assessments and treatment plansPolicies, procedures, and control implementationStatement of Applicability (SoA)Lead initial ISO 27001 implementation and ongoing certification maintenancePlan and run internal audits and management reviewsCoordinate and manage external certification and surveillance auditsCustomer & Partner Security ReviewsAct as the primary point of contact for:Customer security questionnairesVendor risk assessmentsDue diligence reviews (enterprise & financial services clients)Prepare and maintain standard security responses (ISO, SOC-style answers, cloud security posture)Support enterprise sales by explaining security controls clearly and confidentlySecurity Governance & ControlsMaintain and improve:Security policies (access control, incident response, vendor management, etc.)Asset management and data classificationSupplier and third-party risk managementEnsure security controls are practical and proportionate, not bureaucraticTrack and manage security risks and exceptionsAudit, Monitoring & EvidenceMaintain audit-ready evidence for:Access controlsChange managementIncident handlingBackups, logging, and monitoringWork with engineering to ensure evidence is automated where possibleMonitor compliance drift and follow up on corrective actionsIncident & Vulnerability ManagementOwn the security incident response processCoordinate incident handling, root cause analysis, and corrective actionsTrack vulnerabilities and remediation status (with engineering)Awareness & EnablementRun lightweight security awareness training for staffHelp teams understand why controls exist, not just enforce themEmbed security into day-to-day operations without slowing delivery REQUIREMENTS:Essential3–7 years’ experience in information security, compliance, or GRCHands-on experience with ISO/IEC 27001 (implementation
https://www.jobplacements.com/Jobs/S/Security--Compliance-Manager-1255020-Job-Search-01-23-2026-02-00-16-AM.asp?sid=gumtree
Invalid date
Job Placements