Cybersecurity Assurance / Compliance Specialist

PerformIT Personnel; Gqeberha; On-site; ZAR 700,000 - 1,000,000; Full time

Job summary

PerformIT Personnel Port Elizabeth is seeking a Cybersecurity Assurance & Compliance Specialist to lead and support information security governance, risk management, compliance, and security assurance across the organization, collaborating with Global IT, Legal, HR and Internal Audit to raise the security program.

The role maintains and advances certification programs (SOC 2 Type II, ISO/IEC 27001, CMMC) with audit readiness, manages the risk register, coordinates remediation, and serves as the

Qualifications

• Bachelor’s degree in Information Security, Cybersecurity, Information Technology or related discipline.
• Minimum 5 years of experience in cybersecurity, information security, IT audit, risk management, governance, or compliance.
• Minimum 3 years of direct experience supporting SOC 2, ISO/IEC 27001, CMMC, or NIST 800-171.
• Experience with internal or external audits and security certification programs.
• Experience managing compliance documentation, evidence collection, and audit coordination.
• Experience conducting risk assessments and maintaining risk registers.
• Experience responding to customer security questionnaires and assessments.

Responsibilities

• Lead and support information security governance, risk management, compliance, and security assurance activities across the organization.
• Collaborate with Global IT, Legal, HR, Internal Audit, business stakeholders, and third-party partners to maintain and improve the security program.
• Maintain and advance security certification programs (SOC 2 Type II, ISO/IEC 27001, CMMC) and ensure audit readiness.
• Serve as the primary point of contact for external auditors, certification bodies, customer assessments, and internal stakeholders.
• Oversee enterprise cyber risk management activities, maintain the cybersecurity risk register, and coordinate remediation efforts across business and technology teams.
• Translate complex technical requirements into actionable business processes and communicate effectively with non-technical audiences.

Skills

GRC knowledge

Strong communication

Audit coordination

Risk assessment

Education

Bachelor’s degree in Information Security/Cybersecurity/IT

Equivalent combination of education and certifications

Tools

Microsoft 365 suite

Policy management platform

Job description

Cybersecurity Assurance / Compliance Specialist –Port Elizabeth.

A global company based in PE is looking for a Cybersecurity Assurance & Compliance Specialist to join their team.

The Cybersecurity Assurance & Compliance Specialist is responsible for leading and supporting information security governance, risk management, compliance, and security assurance activities across the organization. The role works closely with Global IT, Legal,

HR, Internal Audit, business stakeholders, and third-party partners to maintain and improve the organization’s security program.

This role is responsible for maintaining and advancing our security certification programs, including SOC 2 Type II, CMMC Level 2, and ISO/IEC 27001, while ensuring continuous audit readiness and compliance with applicable regulatory and customer requirements.

The Cybersecurity Assurance & Compliance Specialist will serve as the primary point of contact for external auditors, certification bodies, customer security assessments, and internal stakeholders.

The role will also oversee enterprise cyber risk management activities, maintain the cybersecurity risk register, and coordinate remediation efforts across business and technology teams.

This position requires a strong background in cybersecurity governance, risk, and compliance (GRC), exceptional communication skills, and the ability to translate complex technical requirements into actionable business processes.

Requirements:

• Bachelor’s degree in Information Security, Cybersecurity, Information Technology,
• Risk Management, Business Administration, or a related discipline is preferred.
• An equivalent combination of education, professional certification, and relevant
  experience may be considered.
• Minimum 5 years of experience in cybersecurity, information security, IT audit, risk management, governance, or compliance.
• Minimum 3 years of direct experience supporting one or more of the following:
  • SOC 2
  • ISO/IEC 27001
  • CMMC
  • NIST 800-171
• Internal or external audits
• Security certification programs
• Experience managing compliance documentation, evidence collection, and audit coordination.
• Experience conducting risk assessments and maintaining risk registers.
• Experience responding to customer cybersecurity questionnaires and security assessments.

Technical and Software Skills:

• Proficient with Microsoft 365 productivity and collaboration tools, including Teams,
• Word, Excel, PowerPoint, and SharePoint.
• Comfortable with governance, risk, compliance, policy management, reporting, and documentation platforms.
• Able to read and interpret business cases, project plans, risk reports, policies, procedures, training materials, and audit documentation.
• Able to prepare clear written summaries,