Information Security & Compliance Officer

About the role

The Information Security & Compliance Officer will lead the delivery of our client’s information security programme and ensure compliance with regulatory obligations such as POPIA and GDPR. This individual contributor role combines cyber‑security operations, risk management, and security awareness across the organisation.

Key responsibilities

• Monitor systems and networks for threats, investigate incidents and perform root‑cause analysis.
• Manage security tools including SIEM and endpoint protection platforms.
• Conduct vulnerability scans, risk assessments and penetration testing.
• Maintain and improve server, network and cloud security configurations.
• Ensure POPIA compliance, support GDPR requirements and manage data‑breach responses.
• Produce regular security dashboards, compliance reports and maintain security policies.
• Support disaster‑recovery testing, security audits and liaise with internal teams and vendors.

Required profile

• 5‑7 years of hands‑on experience in information security, cybersecurity engineering or IT security.
• Proven experience in security monitoring, incident response and vulnerability management.
• Experience with POPIA compliance and IT‑governance frameworks.
• Exposure to cloud environments (Azure, AWS, GCP) and cloud‑security practices.

Required skills

• SIEM platforms
• Endpoint protection platforms
• Vulnerability management tools
• POPIA compliance
• IT governance frameworks
• Azure, AWS, GCP
• Windows OS and Entra ID/Azure AD
• Networking fundamentals (TCP/IP, DNS, DHCP)
• MITRE ATT&CK framework
• Incident response and penetration testing