Information Security Manager

About the role

A global investment advisory firm focused on long-term value creation is hiring an Information Security Manager in Cape Town, advertised by recruiter Parvana. The role is hybrid, with the option to work in the office daily or remotely. The client is large, offers strong career development and invests heavily in employee benefits.

Key responsibilities

• Design and maintain an Information Security Program aligned with ISO 27001, SOC 2 and NIST.
• Establish enterprise-wide security policies and ensure adherence to GDPR, CCPA and POPIA.
• Serve as Data Protection Officer (DPO) and lead incident response from investigation through containment.
• Partner with IT, Engineering, HR and Legal to integrate security requirements.
• Conduct regular risk assessments, maintain a central risk register and run prioritised gap analysis and remediation plans.
• Oversee security controls such as firewalls, encryption, intrusion detection and identity management.
• Monitor emerging threats, manage InfoSec projects and advise on cloud architecture and secure development (SDLC).

Required profile

• Relevant tertiary qualification beneficial (Computer Science, Information Security, etc.).
• 6+ years of experience in information security management, preferably in software development or enterprise environments.
• Proven track record delivering complex security programs and managing certification processes (ISO/SOC 2/NIST).
• Experience in incident management, root cause analysis and disaster recovery planning.

Required skills

• Certification ideal: CISSP or CISM.
• Knowledge of ISO 27001, SOC 2, NIST, GDPR, CCPA, POPIA, incident response and cloud security.