Information Security/cybersecurity Grc Analyst

3 days ago

Cape Town, South Africa 2U Full time

At 2U, we are all in on purpose. We are motivated by our mission - to eliminate the back row in education - and connected by our shared passion to deliver world-class digital education at scale. As the parent company of edX, the world's leading online learning platform, 2U powers more than 4,000 online higher education offerings - from free courses to full degrees. Together with more than 230 colleges, universities, and corporate partners, we are helping to unlock human potential.

**What We're Looking For**:
As an individual, you complete tasks and projects with mínimal supervision and act as a vital member of the global cybersecurity team, as well as, a valuable embedded resource within 2U governance teams.

**Responsibilities Include, But Are Not Limited To**:

- Technical:

- Participate as a member of Cybersecurity in all annual compliance projects and initiatives.
- Participate in annual PCI-DSS, SOC2, SOX and CyberEssentials assessments and audit engagements.
- Assist with requests from internal and external partners and contribute to the Third Party Risk Management process such as vendor onboarding and continuous vendor monitoring..
- Participate in engagements with teams across business units to translate governance requirements and standards into tangible controls and solutions.
- Identify required security training for engineers, developers and internal security team, where necessary and contribute to effectiveness of the 2U Security Awareness Program.
- Research:

- Stay abreast of emerging compliance regulations and standards with the aim of constantly improving the organization's security posture.
- Be active in the Cybersecurity communities and stay informed on current threats, attack techniques and strategies.
- Personal:

- Open to change and ability to pivot to different priorities and situations.
- Must be able to work well independently as well as part of a larger team.
- Ability to work on a diverse team with a diverse range of people

**Things That Should Be In Your Background**:

- 5 years of combined experience in IT engineering, security governance or related fields.
- Knowledge of Security Frameworks and best practices (PCI-DSS, NIST, ISO27001, COSO, etc).
- Risk Management frameworks and processes.
- Threat and vulnerability management policies, systems and remediations.
- Ability to translate control requirements into technical language.
- Documenting, implementing and measuring controls and processes.
- Able to conduct assessments and communication of the results thereof.
- An industry related certification (ex. CEH, CISSP, CISA).
- Experience with technical and narrative writing.

**Benefits & Culture**

Our global employee base is a diverse collection of innovators, dreamers, and doers working together to transform lives through higher education. We believe that every employee can advance our shared purpose, and that life at 2U should be fun and meaningful. If you're excited by the opportunity to provide over 40 million learners and counting with access to world-class online higher education, then join us - and do work that makes a difference. #NoBackRow

We offer comprehensive benefits (unique per country) and excellent work/life balance.
Full-time, ZA benefits include:

- 2 complimentary Getsmarter short courses per year
- Subsidised medical aid with Discovery Health Medical Scheme
- 4% 2U contribution towards Discovery Life Pension Fund and Group Risk Benefit
- Employee Assistance Program (EAP)
- Generous leave policy including time off to volunteer for non-profit organization, study leave, sports leave and a company-wide festive season break

**2U Diversity and Inclusion Statement**

At 2U, we are committed to building and sustaining a culture of belonging, respect, and inclusion. We are proud of the steps we've taken to bring together an employee base that embodies diverse walks of life, ideas, genders, ages, races, cultures, sexual orientations, abilities and other unique qualities. We strive to offer a workplace where every employee feels empowered by what makes us different, as well as by how we are alike.

**About 2U Inc. (NASDAQ: TWOU)**

**About edX**

edX is the education movement for restless learners and a leading global online learning platform from 2U, Inc. (Nasdaq: TWOU). Together with the majority of the world's top-ranked universities and industry-leading companies, we bring our community of over 45 million learners world-class education to support them at every stage of their lives and careers, from free courses to full degrees. And we're not stopping there — we're relentlessly pursuing our vision of a world where every learner can access education to unlock their potential, without the barriers of cost or location. Learn more at edX.org.

NoBackRow

The above statements are intended to describe the general nature and level of work performed by individuals assigned to this position, and are not intended to be construed as an exhaustive list of all respon

  • Grc Analyst

    7 months ago

    Cape Town, South Africa Engen Full time

    **Purpose of the Job**: **Who You Are**: - You can navigate challenges and leverage available resources to achieve your goals. - You continuously seek ways to improve processes and outcomes to deliver optimal results. - You are committed to achieving measurable results and meeting or exceeding targets. - You strive to provide exceptional service and support...

  • Grc Analyst

    5 days ago

    Cape Town, South Africa Zeal HR Full time

    A well established and trusted managed solutions provider focusing on optimising cloud infrastructure and cyber security is looking for an experienced GRC Analyst. This is a permanent position and will mainly be remote. KEY REQUIREMENTS: - Grade 12/ Matric Certificate - Relevant Tertiary Qualification - At least 2-3 years working experience in information...

  • Information Security Specialist

    4 weeks ago

    Cape Town, Western Cape, South Africa IOCO Full time

    Cybersecurity has become an essential aspect of modern businesses, and IOCO is no exception. As a leading organization in the field, we are committed to protecting our assets and data from potential threats. To achieve this goal, we are seeking a highly skilled Information Security Specialist to join our team.About the RoleIn this role, you will be...

  • Team Lead: Cybersecurity Grc

    7 days ago

    Cape Town, South Africa Engen Full time

    **BAND: EH - Cape Town**: **Purpose of the Job**: To provide leadership on Cybersecurity Governance, Risk and Compliance through implementing, maintaining, and supporting the adopted IT/OT Cybersecurity Governance and Risk Management Framework, methodologies, and tools, including the Information Security Management System (ISMS) and by performing...

  • Information Security Governance/risk and Compliance

    7 days ago

    Cape Town, South Africa Achievement Awards Group (Pty) Ltd Full time

    To start soonest. A vacancy exists at our campus in Westlake Business Park, Cape Town for an Information security governance, risk and compliance specialist The primary focus for the Information Security Governance, Risk and Compliance is a mid-level position that will coordinate and perform the company’s security assessment functions and control testing...

  • Cybersecurity Analyst

    7 days ago

    Cape Town, South Africa Dimension Data Full time

    We're seeking a talented Security Analyst to join our cyber security team. As part of the Cybersecurity Team, you will be responsible for analyzing and reporting on network traffic, implementing solutions that provide IT security, and coordinating various teams within the company. You will report directly to one of our Senior Managers in order to receive...

  • Junior Virtual Ciso

    4 days ago

    Cape Town, South Africa The Vocation Station Full time

    **Junior Virtual ISO (Information Security Officer)** **_ - The Junior Virtual Information Security Officer is responsible for improving client cyber security maturity by providing risk-based feedback and advice formulated from the analysis of logs, alerts and the relevant control environment. Complex security concepts are to be discussed and presented to...

  • Grc Consultant

    2 months ago

    Cape Town, South Africa Cognisys Group Ltd Full time

    We have an exciting opportunity to join our GRC team as a GRC Consultant at a time of rapid growth and innovation at Cognisys. **Company Overview** Cognisys is a leading cyber security company specialising in penetration testing, GRC consulting, and managed security services. We pride ourselves on our customer service, forward thinking approach and...

  • Cybersecurity & Digital Information Officer

    4 weeks ago

    Cape Town, Western Cape, South Africa Tower Group Full time

    Job OverviewTower Group is seeking a highly skilled Cybersecurity & Digital Information Officer to join our team. The successful candidate will be responsible for providing cybersecurity training and awareness to employees, members of parliament and support staff.Key ResponsibilitiesAssist with identifying and evaluating potential security risks to Tower...

  • SAP Grc Specialist

    4 days ago

    Cape Town, South Africa SM Squared Talent (Pty) Ltd Full time

    **Key Responsibilities**: - Implement and configure SAP GRC modules to manage access controls, user authorizations, and security policies within SAP systems. - Assess and address potential risks and compliance gaps related to SAP systems, proposing and implementing necessary controls to mitigate them effectively. - Collaborate with internal stakeholders and...

  • Information Security Analyst

    4 days ago

    Cape Town, South Africa Cape Union Mart - Head Office Full time

    **Key responsibilities**: Implement and maintain security controls, such as firewalls, intrusion detection/prevention systems, and encryption technologies, to protect the company's information assets. Develop and implement security policies, procedures, and standards, to ensure compliance with industry regulations and best practices. Respond to security...

  • IT Risk and Security Consultant

    4 weeks ago

    Cape Town, Western Cape, South Africa IOCO Full time

    At IOCO, we are seeking an experienced IT Risk and Security Analyst to support our IT Risk and Cyber Security programs. As a key member of our team, you will play a critical role in enabling IT team-embedded security analysis and business enablement, while driving risk management.About the RoleWe are looking for someone with up to 8 years of relevant...

  • Cybersecurity & Digital Information Officer

    3 months ago

    Cape Town, South Africa Tower Group Full time

    Why Us? The Information Technology and Digital Services tribe are a team of focused professionals who provide the full range of Information Technology and Digital Services to the organisation. The Information Technology and Digital Services requires the services of an Officer: Cybersecurity & Digital Information who meets the below criteria and can...

  • Cybersecurity & Digital Information Officer

    3 months ago

    Cape Town, South Africa Tower Group Full time

    Why Us?The Information Technology and Digital Services tribe are a team of focused professionals who provide the full range of Information Technology and Digital Services to the organisation. The Information Technology and Digital Services requires the services of an Officer: Cybersecurity & Digital Information who meets the below criteria and can contribute...

  • IT Risk

    2 days ago

    Cape Town, South Africa Armstrong Appointments Full time

    Our client in the retail industry based in Cape Town are seeking the skills of an IT Risk & Security Analyst **Main job function** To support delivery of the IT Risk and Cyber Security programs. The analyst plays two critical roles in support of these programs; to enable IT team-embedded security analysis and business enablement, and to drive risk...

  • Information Security Analyst

    2 weeks ago

    Cape Town, South Africa eSoft Development and Technologies Full time

    One of our clients wants to grow their team and we are looking for an information security analyst. The Information Security Analyst will be responsible for the planning, implementation and execution of daily/weekly/monthly security tasks that ensures that the clients are compliant with the required standards by providing analysis, administration, and...

  • IT Risk and Security Analyst

    5 months ago

    Cape Town, South Africa IOCO Full time

    We are looking to hire an IT Risk and Security Analyst to support the delivery of the IT Risk and Cyber Security programs. The Analyst will play two critical roles in support of these programs; to enable IT team-embedded security analysis and business enablement, and to drive risk management. This role looks to streamline risk and security processes in...

  • Cyber Security Analyst

    2 weeks ago

    Cape Town, South Africa BASHR Consulting Full time

    As a Cybersecurity Analyst you will be required for analysing and reporting on network traffic, implementing solutions that provide IT security, and coordinating various teams within the company. You will be responsible for monitoring and evaluating threats that could potentially breach the network. **Requirements**: - Tertiary Qualification - AWS:...

  • IT Risk An Security Analyst

    4 days ago

    Cape Town, South Africa Progressive IT Resourcing Full time

    **Introduction** To support delivery of the IT Risk and Cyber Security programs. The analyst plays two critical roles in support of these programs; to enable IT team-embedded security analysis and business enablement, and to drive risk management. This role looks to streamline risk and security processes in support of quality and speedy delivery in a...

  • Information Security Analyst

    2 weeks ago

    Cape Town, South Africa Dimension Data Full time

    The Information Security Analyst will be responsible for the planning, implementation and execution of daily/weekly/monthly security tasks that ensures that the clients are compliant with the required standards by providing analysis, administration, and advisory input. The focus will be on the maintenance of compliance, security, and risk functions in...