Information Security Manager – Hybrid, Cape Town

About the role

We are seeking an experienced Information Security Manager to lead the design, implementation and ongoing management of our information security program. Based in Cape Town with a hybrid work model, you will protect a global investment advisory firm’s data and systems while supporting a culture of innovation and wellness.

Key responsibilities

• Design and maintain an information security program aligned with ISO 27001, SOC 2 and NIST frameworks.
• Develop, enforce and monitor enterprise‑wide security policies and ensure compliance with GDPR, CCPA and POPIA.
• Act as Data Protection Officer and lead all incident‑response activities from detection through containment.
• Collaborate with IT, Engineering, HR and Legal to embed security requirements into projects and cloud architectures.
• Conduct regular risk assessments, maintain a central risk register and drive remediation plans.
• Oversee implementation of core security controls such as firewalls, encryption, intrusion detection systems and identity management.
• Stay abreast of emerging threats and provide proactive security recommendations.

Required profile

• Relevant tertiary qualification (e.g., Computer Science, Information Security) – preferred.
• Professional certifications such as CISSP or CISM – preferred.
• 6+ years of experience in information security management, preferably in software development or enterprise environments.
• Proven track record delivering complex security programs and managing ISO/SOC 2/NIST certifications.
• Experience in incident management, root‑cause analysis and disaster‑recovery planning.

Required skills

• ISO 27001, SOC 2, NIST frameworks
• GDPR, CCPA, POPIA compliance
• CISSP, CISM certifications
• Risk management and risk register maintenance
• Incident response and disaster recovery
• Firewalls, encryption, intrusion detection, identity management
• Cloud architecture security and secure SDLC practices

What we offer

• Industry‑leading benefits and generous salary package.
• Strong focus on employee wellness and professional development.
• Access to cutting‑edge automation, AI and R&D tools.
• Collaborative, diverse and cosmopolitan work environment.