IT Security & Compliance Administrator

About the role

This full-time, junior-to-intermediate position is responsible for maintaining robust security and compliance controls within a fintech-focused financial services organisation based in Sandton, Johannesburg. The role centralises day-to-day cyber-security administration and supports alignment with ISO 27001.

Key responsibilities

• Administer security settings across Microsoft 365, Entra ID (Azure AD), Microsoft Defender and Intune.
• Manage user access, groups, conditional-access policies, MFA enforcement and least-privilege configurations.
• Monitor security alerts and dashboards, escalating or acting on findings as required.
• Maintain device compliance policies, endpoint protection and basic patch oversight via Intune.
• Support onboarding and off-boarding from a security perspective, including regular access reviews.
• Keep security configuration documentation accurate, current and auditable.
• Maintain and version internal security policies and compliance artefacts, supporting audit and certification activities.
• Assist the organisation in demonstrating compliance evidence for partners, funders and regulators.

Required profile

• Junior to intermediate experience with hands-on operational security tasks.
• Experience or interest in financial services, lending or other regulated environments is helpful but not mandatory.
• Familiarity with audit, legal, risk or certification processes (e.g., ISO 27001, SOC 2) is advantageous.
• Strong attention to detail and ability to maintain accurate documentation.

Required skills

• Microsoft 365
• Entra ID (Azure AD)
• Microsoft Defender
• Microsoft Intune
• Conditional Access and Multi-Factor Authentication
• Device compliance and patch management
• ISO 27001 framework knowledge