Information Technology Security Manager

About the role

Our client in Port Elizabeth is looking for an experienced Information Technology Security Manager to lead and enhance the company’s information security governance, risk and compliance across a global environment. You will be responsible for embedding security frameworks into business operations and driving continuous improvement of security policies and practices.

Key responsibilities

• Develop, implement and continuously improve information security policies, standards and governance practices.
• Identify, assess, monitor and mitigate information security risks, maintain risk registers and oversee remediation activities.
• Coordinate security audits, assessments and compliance initiatives, manage findings and corrective actions.
• Drive security awareness programs and provide guidance to employees, management and stakeholders.
• Support third‑party security risk management through vendor reviews and remediation coordination.
• Manage security programs, strategic initiatives, reporting activities and continuous improvement efforts.
• Participate in strategic security projects, business continuity and disaster recovery governance, policy reviews and stakeholder engagement.
• Evaluate emerging security risks and industry trends to inform the security roadmap.

Required profile

• 5+ years of experience in information security, cybersecurity, risk management, governance, compliance or audit.
• Bachelor’s degree in a related field preferred.
• Strong understanding of information security principles, governance practices and risk management processes.
• Experience coordinating security audits, assessments and remediation activities.
• Experience developing and maintaining security policies, standards, procedures and awareness programs.
• Experience with security frameworks and standards such as ISO 27001, NIST Cybersecurity Framework, SOC 2, CIS Controls.
• Experience with third‑party security risk management.
• Professional security certification (e.g., CISSP, CISM, CRISC, CGRC, ISO 27001 Lead Implementer) preferred.

Required skills

• ISO 27001
• NIST Cybersecurity Framework
• SOC 2
• CIS Controls