Closing Date: 31st October
Location: Somerset West
Your Story
You're someone who thrives at the intersection of strategy, security, and innovation. You care deeply about building trust-across teams, with customers, and within systems. You're passionate about governance, risk, and compliance, and you're excited by the opportunity to shape how a fast-growing tech company approaches AI, automation, and resilience. You want your work to matter-to protect people, data, and the future of technology.
If that sounds like you, we'd love to meet you.
Your Responsibilities:
As our GRC Specialist, you'll be a key driver of our security-first culture. You'll lead initiatives that ensure our governance, risk, and compliance frameworks are robust, forward-thinking, and aligned with global standards. You'll work cross-functionally to embed security into every layer of our business-from product development to vendor management.
Governance & Strategy
Develop and evolve security governance frameworks, policies, and standards.
Define and communicate our risk appetite across the organisation.
Lead internal audits and support external compliance reviews. Risk Management
Risk Management
Conduct risk assessments and gap analyses, and design mitigation strategies.
Maintain dashboards and reports on IT risk posture and control effectiveness.
Support business continuity and disaster recovery planning.
Compliance & Regulatory Alignment
Ensure compliance with GDPR, HIPAA, POPIA, CCPA, and other global regulations.
Maintain cyber insurance coverage through policy adherence.
Prepare for and support ISO, SOC2, and NIST audits.
Data Privacy & Protection
Act as our Data Protection Officer (DPO).
Implement data classification, access controls, encryption, and retention policies.
Lead incident response for data breaches and liaise with regulators.
AI & Emerging Technologies Governance
Develop governance frameworks for AI and emerging technologies.
Assess ethical, societal, and regulatory risks of AI deployment.
Champion responsible and inclusive AI use across the business.
Security Controls & Monitoring
Implement and monitor security controls across systems and applications.
Oversee vulnerability management, penetration testing, and bug bounty programmes.
Collaborate with engineering teams on secure coding and AppSec practices.
Third-Party Risk Management
Conduct vendor security due diligence and contractual risk assessments.
Partner with procurement to reduce third-party risks.
Security Awareness & Culture
Design and deliver engaging training programmes, including phishing simulations.
Foster a security-first mindset across all teams.
Promote adoption of ISO 27001 and other relevant standards.
Reporting & Continuous Improvement
Provide monthly GRC effectiveness reports to senior leadership.
Define and track KPIs aligned with business goals.
Lead continuous improvement initiatives based on audit findings and threat intelligence.
Your Story:
5+ years in GRC, risk management, or information security.
Strong knowledge of ISO 27001, SOC2, NIST, CoBIT, ITIL, and PCI frameworks.
Experience with data privacy regulations and AI governance.
Excellent communication and stakeholder engagement skills.
Proven ability to lead cross-functional teams and manage budgets.
CISM or equivalent certification (or working towards it).
AI & Automation Integration
Use AI tools for risk analysis, compliance monitoring, and threat detection.
Promote automation in vulnerability scanning, reporting, and policy enforcement.
Ensure ethical and secure use of AI across business functions.
Exposure to AI-driven security monitoring and automated compliance reporting will be part of your development journey.
MNCJobs.co.za will not be responsible for any payment made to a third-party. All Terms of Use are applicable.