IT Quality Assurance Officer & Management Representative (ISO 27001)

About the role

An opportunity exists within a multi‑disciplinary project management firm for a Quality IT Officer / Management Representative reporting to the Compliance / IMS Department. The incumbent will maintain, implement, monitor and continuously improve the Information Security Management System (ISMS) across all divisions, ensuring compliance with ISO standards, company procedures, legislative requirements and best‑practice governance frameworks.

Key responsibilities

• Administer the ISMS: develop, review and control policies, procedures, manuals, forms, registers and records; keep documentation audit‑ready and support ISO 27001 certification.
• Plan and conduct internal IT audits, prepare audit plans, working papers and reports; liaise with external auditors and follow up corrective actions.
• Perform IT risk assessments, root‑cause analysis and monitor effectiveness of corrective actions; identify improvement opportunities.
• Prepare and lead management review meetings, compile monthly compliance, audit, risk and quality performance reports for senior management.

Required profile

• BCom degree in Management Information Systems, Quality Management, Auditing, Risk Management or related field.
• Minimum 5 years experience in Quality Assurance, Governance, Risk & Compliance, internal auditing or ISMS environments, with proven experience in ISO 27001.

Required skills

• ISO 27001, IT General Controls (ITGC) and Application Controls.
• ITIL framework knowledge.
• Data‑analytics tools: Excel, SQL, SAS, Power BI.
• Microsoft Office suite, Teams and SharePoint.
• CISA certification or progress toward it (advantageous).