Information Security Manager

Parvana


Job Location:

Cape Town - South Africa

Monthly Salary: Not Disclosed
Posted on: Yesterday
Vacancies: 1 Vacancy

Job Summary

About our client:
Our client is a global investment advisory firm focusing on long-term value creation through investment strategies. They work with a diverse group of institutional partners and pride themselves on their collaborative sustainable inclusive culture and performance. You are welcome to go into the office daily or to take advantage of their hybrid in-office / remote benefit. This company places significant investment in employee wellness their benefits which are on top of generous basic salaries are industry leading in their generosity. Our client is large offering fantastic career development opportunities but also very dynamic they track as many metrics as possible in order to continuously improve - they spare no expense on the tools to do so. Automation AI and R&D are pillars of their business framework which ensures you should never be at risk of falling behind or getting stuck working with old legacy software. Culturally they are very cosmopolitan and diverse you will be working with the best globally.

What you will be doing:
  • Design and maintain an Information Security Program aligned with industry standards like ISO 27001 SOC 2 and NIST.
  • Establish enterprise-wide security policies and ensure adherence to global privacy regulations such as GDPR CCPA and POPIA.
  • Serve as the Data Protection Officer (DPO) and lead all incident response efforts from investigation through containment.
  • Partner with IT Engineering HR and Legal teams to integrate security requirements.
  • Conduct regular risk assessments maintain a central risk register and execute prioritised gap analysis and remediation plans.
  • Drive and maintain compliance with critical certifications and frameworks including ISO 27001 SOC 2 and NIST.
  • Oversee the implementation of essential security controls such as firewalls encryption intrusion detection and identity management.
  • Monitor emerging threats to provide proactive security recommendations manage InfoSec projects and offer guidance on cloud architecture and secure development (SDLC).

What our client is looking for:
  • A relevant tertiary qualification would be beneficial (Computer Science Information Security etc.).
  • A relevant certification would be ideal (e.g. Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM).
  • 6 years of relevant experience in information security management preferably within software development or enterprise environments.
  • Proven track record in delivering complex security programs and managing certification processes (ISO/SOC 2/NIST).
  • Experience in security incident management root cause analysis and disaster recovery planning.



Required Skills:

Information Security CISSP CISM Risk Management ISO 27001 SOC 2 NIST GDPR CCPA POPIA Incident Response DPO Cloud Security SDLC Compliance Cybersecurity InfoSec Management

About our client:Our client is a global investment advisory firm focusing on long-term value creation through investment strategies. They work with a diverse group of institutional partners and pride themselves on their collaborative sustainable inclusive culture and performance. You are welcome to ...