The Role
Designs and maintains an enterprise information security program aligned to ISO 27001, SOC 2 and NIST. Leads incident response and serves as Data Protection Officer, drives risk assessments and remediation, manages compliance and certification processes, partners with IT/Engineering/Legal/HR, and oversees implementation of controls (firewalls, encryption, IDS, identity management) and secure SDLC guidance.
Summary Generated by Built In
Location: Cape Town | Work Type: Hybrid | Job ID: J107223
About our client:
Our client is a global investment advisory firm focusing on long-term value creation through investment strategies. They work with a diverse group of institutional partners and pride themselves on their collaborative, sustainable, inclusive culture and performance. You are welcome to go into the office daily or to take advantage of their hybrid in-office / remote benefit. This company places significant investment in employee wellness, their benefits which are on top of generous basic salaries, are industry leading in their generosity. Our client is large, offering fantastic career development opportunities but also very dynamic, they track as many metrics as possible in order to continuously improve - they spare no expense on the tools to do so. Automation, AI and R&D are pillars of their business framework which ensures you should never be at risk of falling behind or getting stuck working with old legacy software. Culturally they are very cosmopolitan and diverse, you will be working with the best globally.
What you will be doing:
- Design and maintain an Information Security Program aligned with industry standards like ISO 27001, SOC 2, and NIST.
- Establish enterprise-wide security policies and ensure adherence to global privacy regulations such as GDPR, CCPA, and POPIA.
- Serve as the Data Protection Officer (DPO) and lead all incident response efforts, from investigation through containment.
- Partner with IT, Engineering, HR, and Legal teams to integrate security requirements.
- Conduct regular risk assessments, maintain a central risk register, and execute prioritised gap analysis and remediation plans.
- Drive and maintain compliance with critical certifications and frameworks, including ISO 27001, SOC 2, and NIST.
- Oversee the implementation of essential security controls, such as firewalls, encryption, intrusion detection, and identity management.
- Monitor emerging threats to provide proactive security recommendations, manage InfoSec projects, and offer guidance on cloud architecture and secure development (SDLC).
What our client is looking for:
- A relevant tertiary qualification would be beneficial (Computer Science, Information Security, etc.).
- A relevant certification would be ideal (e.g., Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM).
- 6+ years of relevant experience in information security management, preferably within software development or enterprise environments.
- Proven track record in delivering complex security programs and managing certification processes (ISO/SOC 2/NIST).
- Experience in security incident management, root cause analysis, and disaster recovery planning.
For a more comprehensive list of opportunities that we have on offer, do visit our website - https://www.parvana.co.uk/careers
Requirements
Information Security, CISSP, CISM, Risk Management, ISO 27001, SOC 2, NIST, GDPR, CCPA, POPIA, Incident Response, DPO, Cloud Security, SDLC, Compliance, Cybersecurity, InfoSec Management
Skills Required
- Tertiary qualification in Computer Science, Information Security, or related field
- CISSP or CISM certification
- 6+ years of relevant experience in information security management
- Proven track record delivering complex security programs and managing ISO 27001, SOC 2 or NIST certification processes
- Experience in security incident management, root cause analysis, and disaster recovery planning
- Knowledge and experience with GDPR, CCPA, POPIA and data protection requirements
- Experience implementing and overseeing security controls (firewalls, encryption, intrusion detection, identity management)
- Serve as Data Protection Officer (DPO) and lead incident response efforts
- Ability to partner with IT, Engineering, HR and Legal and provide guidance on cloud architecture and secure SDLC
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Parvana is an IT recruitment agency specializing in connecting top tech talent with leading companies in South Africa and the UK, focusing on software development, finance, and telecommunications.
