Cybersecurity GRC & Assurance Lead

PerformIT Personnel; Oos-Kaap; Remote; ZAR 700,000 - 1,000,000; Full time

Job summary

PerformIT Personnel seeks a Cybersecurity Assurance & Compliance Specialist to lead governance, risk, and compliance initiatives. You will manage certification programs (SOC 2 Type II, ISO/IEC 27001, CMMC) and coordinate with auditors, Legal, HR, and IT to sustain audit readiness.

Your role includes maintaining the risk register, guiding remediation with cross-functional teams, and translating complex security requirements into actionable business processes.

Qualifications

• Minimum 5 years of experience in cybersecurity, information security, IT audit, risk management, governance or compliance.
• Minimum 3 years direct experience supporting SOC 2, ISO/IEC 27001, CMMC, NIST 800-171, audits or security programs.
• Experience managing compliance documentation, evidence collection and audit coordination.
• Experience conducting risk assessments and maintaining risk registers.
• Experience responding to customer cybersecurity questionnaires and security assessments.

Responsibilities

• Lead and support information security governance across the organization.
• Oversee compliance and certification programs including SOC 2, ISO/IEC 27001, and CMMC.
• Serve as primary contact for external auditors and certification bodies.
• Coordinate remediation efforts across business and technology teams.
• Maintain and advance the cybersecurity risk register and related processes.

Skills

Governance

Risk management

Compliance

Audit coordination

Education

Bachelor's degree in Information Security

Equivalent combination of education and certs

Tools

Microsoft 365

Teams

SharePoint

Word

Excel

PowerPoint

Job description

PerformIT Personnel seeks a Cybersecurity Assurance & Compliance Specialist to lead governance, risk, and compliance initiatives. You will manage certification programs (SOC 2 Type II, ISO/IEC 27001, CMMC) and coordinate with auditors, Legal, HR, and IT to sustain audit readiness.

Your role includes maintaining the risk register, guiding remediation with cross-functional teams, and translating complex security requirements into actionable business processes.