Information Technology Security Manager

Our client in Port Elizabeth is seeking an experienced IT Security Manager to lead and strengthen its information security governance, risk, and compliance initiatives across a global business environment. This role will be responsible for ensuring that security frameworks, policies, and risk management processes are effectively implemented and continuously improved.

Responsibilities:

• Lead the development, implementation, and continuous improvement of information security policies, standards, and governance practices while ensuring security requirements are embedded within business operations and strategic initiatives.
• Oversee the identification, assessment, monitoring, and mitigation of information security risks, maintaining risk registers and ensuring remediation activities are effectively managed and reported.
• Coordinate security audits, assessments, and compliance initiatives, managing findings, corrective actions, reporting processes, and adherence to regulatory, contractual, and industry requirements.
• Drive security awareness programs and provide ongoing guidance to employees, management, and stakeholders to strengthen the organisation's overall security culture.
• Support third-party security risk management activities by conducting vendor security reviews, monitoring identified risks, and coordinating appropriate remediation efforts.
• Manage and support security programs, strategic initiatives, reporting activities, and continuous improvement efforts while serving as a central point of coordination for governance, risk, compliance, and security assurance matters.
• Participate in strategic security projects, business continuity and disaster recovery governance activities, policy reviews, security reporting, stakeholder engagement initiatives, and the evaluation of emerging security risks and industry trends.

Requirements:

• 5+ years of experience in information security, cybersecurity, risk management, governance, compliance, audit, or a related field.
• Bachelor's degree in Information Security, Cybersecurity, Information Technology, Risk Management, Business Administration, or a related field is preferred.
• Strong understanding of information security principles, governance practices, and risk management processes.
• Experience coordinating security audits, assessments, findings, and remediation activities.
• Experience developing, maintaining, or supporting security policies, standards, procedures, and awareness programs.
• Experience with security frameworks and standards such as ISO 27001, NIST Cybersecurity Framework, SOC 2, CIS Controls, or equivalent.
• Experience with third-party security risk management.
• eProfessional certification such as CISSP, CISM, CRISC, CGRC, ISO 27001 Lead Implementer, or equivalent.