Cybersecurity Governance & Compliance Lead

EnableSA Recruitment; Gqeberha; On-site; ZAR 600,000 - 900,000; Full time

Job summary

Our Port Elizabeth client seeks a seasoned Cyber Security Specialist to drive governance, risk and compliance across the organization. You will maintain security programs, support audits, and ensure regulatory and customer requirements are met while collaborating with IT, Legal, HR and operations.

The role focuses on strengthening security posture through policy development, risk assessments, and third-party reviews, ensuring audit readiness and transparent reporting to leadership.

Qualifications

• 5+ years experience in Cybersecurity, information security, IT Audit, Risk Management, Governance or Compliance.
• Experience supporting SOC 2 / ISO/IEC 27001 / CMMC / NIST 800-171.

Responsibilities

• Lead and support compliance initiatives relating to recognised cybersecurity and compliance frameworks.
• Coordinate internal and external audits, assessments, and certification activities.
• Maintain audit readiness and ensure accurate documentation and evidence is available for review.
• Monitor audit findings and oversee remediation activities through to completion.
• Act as the primary point of contact for auditors, assessors, certification bodies, and internal stakeholders.
• Develop and maintain security policies, procedures, standards, and governance documentation.
• Manage customer security questionnaires, due diligence requests, and security assessments.
• Collaborate with internal departments to provide accurate responses to customer and vendor security reviews.
• Maintain and enhance the organisation's cybersecurity risk management processes.
• Facilitate risk assessments across systems, applications, business processes, cloud environments, and third-party vendors.
• Identify, evaluate, prioritize, and track cybersecurity risks and mitigation plans.
• Manage and maintain the enterprise cybersecurity risk register.
• Develop risk reporting dashboards, compliance metrics, and key risk indicators for leadership.
• Support third-party risk management and vendor security review activities.
• Assist with security awareness, compliance training, and governance initiatives.
• Research emerging regulatory and compliance requirements and assess business impact.
• Drive continuous improvement of cybersecurity governance, compliance, and risk management practices.

Skills

Cybersecurity experience

Risk management

Audit support

Regulatory compliance

Education

Bachelor's degree (Information Security/Cybersecurity/IT/Risk Management/Business Admin)

Job description

Our Port Elizabeth client seeks a seasoned Cyber Security Specialist to drive governance, risk and compliance across the organization. You will maintain security programs, support audits, and ensure regulatory and customer requirements are met while collaborating with IT, Legal, HR and operations.

The role focuses on strengthening security posture through policy development, risk assessments, and third-party reviews, ensuring audit readiness and transparent reporting to leadership.