Cyber Risk & Compliance Leader

Hire Resolve; Oos-Kaap; On-site; ZAR 1,000,000 - 1,400,000; Full time

Job summary

Hire Resolve's client, a global logistics company with 40+ years of experience, seeks a Cybersecurity Assurance & Compliance Specialist in Gqeberha, Eastern Cape. You will lead governance, risk and compliance activities, manage certifications (SOC 2 Type II, CMMC Level 2, ISO/IEC 27001) and coordinate with auditors and customers.

You will own risk registers, drive policy and control documentation, and partner with Sales, Legal, Privacy, and Infrastructure to support security questionnaires, due

Qualifications

• Minimum 5 years in cybersecurity, information security, IT audit, risk management, governance, or related compliance role.
• Minimum 3 years supporting SOC 2, ISO/IEC 27001, CMMC, NIST 800-171.
• Experience managing compliance documentation and audits; risk assessments and risk registers.
• Experience handling customer security questionnaires and assessments.

Responsibilities

• Lead and coordinate SOC 2 Type II, CMMC Level 2, and ISO/IEC 27001 certifications including audits.
• Maintain audit readiness programs, compliance roadmaps, and mapping to standards.
• Manage evidence collection, control validation, and audit findings tracking.
• Act as liaison to external auditors, certification bodies, customers, and stakeholders.
• Own processes for customer security due diligence responses and RFP security sections.
• Develop and maintain risk register; perform regular risk assessments and dashboards.

Skills

Cybersecurity

IT audit

Risk management

Governance

Communication

Education

Bachelor's degree in Information Security or related

Tools

Microsoft 365

GRC platforms

Policy management tools

Job description

Hire Resolve's client, a global logistics company with 40+ years of experience, seeks a Cybersecurity Assurance & Compliance Specialist in Gqeberha, Eastern Cape. You will lead governance, risk and compliance activities, manage certifications (SOC 2 Type II, CMMC Level 2, ISO/IEC 27001) and coordinate with auditors and customers.

You will own risk registers, drive policy and control documentation, and partner with Sales, Legal, Privacy, and Infrastructure to support security questionnaires, due