Information Security Governance Risk

2 weeks ago

Cape Town, South Africa Black Pen Recruitment Full time

**Cloud Security Engineer (FinTech/Stablecoin)**

Our client holds a prominent position as the leading licensed platform for stablecoin on/off-ramp services in Africa. They are dedicated to pioneering innovative solutions within the African stablecoin landscape.

**Job Type**: Full Time l Remote

**Role Overview**

**Requirements**:

- Bachelor’s degree in discipline related to functional work or role
- Industry recognized certifications such as CISM, CRISC, CISA, or equivalent
- 7+ years of experience in IT Governance or Security Governance working in either a Software Development, FinTech or financial institution.
- Experience working in an IT Governance, Risk and Compliance role
- Strong understanding of compliance frameworks including SOC 2 Type 2, ISO 27001, GDPR, PCI DSS
- Experience leading a company through an audit process for obtaining / maintaining compliance certification such as SOC 2 Type 2, ISO 27001, PCI DSS
- Strong risk assessment framework knowledge and experience performing risk assessments covering key risks and controls.
- Very strong communication (verbal and written) skills and the ability to present with clarity
- Strong project management and organization skills

**Responsibilities**
- Coordinate the development of best practice policies and standards based on various governance frameworks
- Ensure all IT controls are documented and assigned control owners to establish accountability.
- Ensure that risk factors and events are addressed in a cost-effective manner and in line with business objectives
- Assist the IT Governance, Risk & Compliance function in maturing the Information
- Security and Technology Risk Management methodology through improvements in standardized risk assessments
- Update and maintain a robust technology risk and control framework and ensure proper alignment to relevant industry frameworks (e.g., COBIT, SOC 2, ISO 27001, NIST, etc.).
- Monitoring IT controls across the organization
- Assist in the validation of IT control alignment to various industry standards, framework, and requirements (e.g., COBIT, SOC 2, ISO 27001, NIST, etc.)
- Assist in Information Security and Technology Risk Management governance activities including coordinating monthly risk committee meetings with management from IT, Risk and Business Units
- Policy creation, updates, and overall management and organization of shared documentation
- Control Self Assessments and Control Gap Analysis
- Third party risk management and reporting
- Support Security Due-diligence activities with both regulators and business prospects
- Maintaining a Risk Register
- Documenting and evaluating policy exception requests
- Responsible for developing and deriving KPIs from a controls baseline
- Overall analytics of the GRC program and creation and distribution of reporting metrics / dashboarding where appropriate
- Maintenance of the global scope of IT assets, controls, control owners, risks, etc. that make up the IT GRC program
- Creation, documentation and maintenance of governance processes to oversee IT GRC programs

  • IT Governance Manager

    4 weeks ago

    Cape Town, South Africa iLaunch Full time

    Developing and implementing controls aimed at mitigating audit risks Liaising with internal and external stakeholders and advising on various IT Governance topics Manage Information Security, risk management, auditing and incident reponse and recovery Tertiary Qualification in IT or Auditing 4 Years experience in a similar role (Management) 12 Years...

  • Solution Architect

    4 weeks ago

    Cape Town, South Africa Capital Edge Recruitment Full time

    Create information security architectures and designs to secure enterprise information assets in line with architecture standards. Serve as the primary Information Security architecture authority for all project and operational stakeholders, and ensure security architecture across all solutions and technology landscapes. Lead the creation of Information...

  • Information Security Analyst

    4 weeks ago

    Cape Town, South Africa eSoft Development and Technologies Full time

    One of our clients wants to grow their team and we are looking for an information security analyst. The Information Security Analyst will be responsible for the planning, implementation and execution of daily/weekly/monthly security tasks that ensures that the clients are compliant with the required standards by providing analysis, administration, and...

  • Senior IT Auditor: IT, Information Security

    3 weeks ago

    Cape Town, South Africa Santam Full time

    What will you do? A position as a Senior Auditor exists within Group Internal Audit : Santam Corporate Services, based in the Cape Town office. To conduct various types of assurance and consulting reviews with the primary focus on IT, Information Security and Cyber Security audits across the Santam Group (Santam Ltd, subsidiaries, brokers,...

  • Head of Information Security

    5 days ago

    Cape Town, South Africa The Talent Room Full time

    Our client is currently looking for an **Head of Information Security.** This is a **remote role.** **Key Responsibility Areas**: *** - Responsible for all information security, system backups and disaster recovery procedures. - Develop and implement the information security strategy and ensure that it aligns with the overall - business objectives of the...

  • IT Governance Administrator

    4 weeks ago

    Cape Town, South Africa Dimension Data Full time

    FunctieomschrijvingThe IT Governance Administrator will assist in identifying, defining and maintaining the information security policies and standards for the organisation. The IT Governance Administrator will work closely with all service lines to ensure compliance and implementation of audit controls.Performance Objectives:PO 1: Risk...

  • IT Risk Administrator

    4 weeks ago

    Cape Town, South Africa Progressive IT Resourcing Full time

    **Who are we?** Company Group Technology is responsible for the provision of a digitally enabled technology service as a group COE, drive business and transformation and provide group-wide digital and data architecture. We operate the various technology platforms and shared services, ensure Cyber and Information Security resilience, and act as technology...

  • IT Risk Administrator

    4 weeks ago

    Cape Town, South Africa Progressive IT Resourcing Full time

    Who are we?Company Group Technology is responsible for the provision of a digitally enabled technology service as a group COE, drive business and transformation and provide group-wide digital and data architecture. We operate the various technology platforms and shared services, ensure Cyber and Information Security resilience, and act as technology...

  • IT Risk Administrator

    4 weeks ago

    Cape Town, South Africa Progressive IT Resourcing Full time

    Who are we?Company Group Technology is responsible for the provision of a digitally enabled technology service as a group COE, drive business and transformation and provide group-wide digital and data architecture. We operate the various technology platforms and shared services, ensure Cyber and Information Security resilience, and act as technology...

  • IT Risk Administrator

    3 weeks ago

    Cape Town, South Africa Progressive IT Resourcing Full time

    Who are we? Company Group Technology is responsible for the provision of a digitally enabled technology service as a group COE, drive business and transformation and provide group-wide digital and data architecture. We operate the various technology platforms and shared services, ensure Cyber and Information Security resilience, and act as technology...

  • IT Risk Manager

    7 days ago

    Cape Town, South Africa Progressive IT Resourcing Full time

    Our ClientCompany Group Technology is responsible for the provision of a digitally enabled technology service as a group COE, drive business and transformation and provide group-wide digital and data architecture. We operate the various technology platforms and shared services, ensure Cyber and Information Security resilience, and act as technology...

  • IT Risk Manager

    4 weeks ago

    Cape Town, South Africa Progressive IT Resourcing Full time

    Our ClientCompany Group Technology is responsible for the provision of a digitally enabled technology service as a group COE, drive business and transformation and provide group-wide digital and data architecture. They operate the various technology platforms and shared services, ensure Cyber and Information Security resilience, and act as technology...

  • IT Risk Manager

    6 days ago

    Cape Town, South Africa Progressive IT Resourcing Full time

    Our Client Company Group Technology is responsible for the provision of a digitally enabled technology service as a group COE, drive business and transformation and provide group-wide digital and data architecture. We operate the various technology platforms and shared services, ensure Cyber and Information Security resilience, and act as technology...

  • IT Risk Manager

    6 days ago

    Cape Town, South Africa Progressive IT Resourcing Full time

    Our ClientCompany Group Technology is responsible for the provision of a digitally enabled technology service as a group COE, drive business and transformation and provide group-wide digital and data architecture. We operate the various technology platforms and shared services, ensure Cyber and Information Security resilience, and act as technology...

  • IT Risk Manager

    6 days ago

    Cape Town, South Africa Adzuna ZA B C2 Full time

    Our ClientCompany Group Technology is responsible for the provision of a digitally enabled technology service as a group COE, drive business and transformation and provide group-wide digital and data architecture. We operate the various technology platforms and shared services, ensure Cyber and Information Security resilience, and act as technology...

  • IT Risk Manager

    3 weeks ago

    Cape Town, South Africa Progressive IT Resourcing Full time

    Our Client Company Group Technology is responsible for the provision of a digitally enabled technology service as a group COE, drive business and transformation and provide group-wide digital and data architecture. They operate the various technology platforms and shared services, ensure Cyber and Information Security resilience, and act as technology...

  • Site Security Manager

    7 days ago

    Cape Town, South Africa FIDELITY SECURITY SERVICES Full time

    **Security Manager Position available** Security Company is looking for a Site Security Manager for a large Shopping Centre in the Northern Suburbs. **Job Introduction**: This key management role has responsibility for managing the entire security team on site. The individual will report to the Regional Manager and Operations Manager (Client), will lead...

  • Security Operations Manager

    4 weeks ago

    Cape Town, South Africa Global Security Consulting Full time

    **Security Operations Manager** As Operations Manager, your responsibilities would encompass a broad range of duties aimed at ensuring the effective and efficient operation of security services delivered to our clients. **Minimum Requirements**: - Matric Certified - PSIRA Grade A Registered - Solid Computer Proficiency - Drivers Licence Code 08 - Minimum...

  • Security Area Manager

    4 weeks ago

    Cape Town, South Africa Global Security Consulting Full time

    **Security Operations Manager** As Area Manager, your responsibilities are multifaceted and critical to the company’s success. By overseeing operational efficiency, fostering strong client relationships, developing and empowering staff, ensuring compliance, managing finances effectively, maintaining readiness for emergencies, and driving business growth,...

  • Chief Security Advisor: Security Advisory Services

    7 days ago

    Cape Town, South Africa Western Cape Government Full time

    **Job Purpose**: The Department of Community Safety, Western Cape Government has an opportunity for a suitably qualified and competent individual to assist with the implementation of safety and security tactical interventions to build departmental resilience in providing safety and security solutions and compilation of safety and security risk assessments....