Information Security Officer

EQPlus; Cape Town; On-site; ZAR 50 000 - 100 000; Full time

Job summary

Ein aufstrebendes Unternehmen im Fintech-Sektor sucht einen engagierten Informationssicherheitsbeauftragten, der die Sicherheitsstrategien leitet und umsetzt, um Daten zu schützen und Compliance zu gewährleisten. In dieser Schlüsselrolle arbeiten Sie eng mit verschiedenen Teams zusammen, um Sicherheitsrichtlinien zu implementieren und Sicherheitsbewusstsein im gesamten Unternehmen zu fördern. Sie werden Herausforderungen in einem dynamischen Startup-Umfeld meistern, während Sie sicherstellen, dass die Sicherheitsstandards den sich entwickelnden regulatorischen Anforderungen entsprechen. Wenn Sie eine Leidenschaft für Informationssicherheit und ein pragmatisches Mindset haben, ist dies die perfekte Gelegenheit für Sie.

Qualifications

• 4+ Jahre Erfahrung in der Informationssicherheit, vorzugsweise im Fintech-Bereich.
• Nachgewiesene Erfahrung in der Verwaltung der PCI-DSS-Compliance.

Responsibilities

• Leitung der Informationssicherheitsstrategie und -richtlinien.
• Durchführung von Compliance-Audits und Risikobewertungen.

Skills

Information Security

PCI-DSS

ISO 27001

SOC 2

GRC

Cloud Security

AWS

Fintech

Job description

Role Overview

As the Information Security Officer, you will lead the company's information security function as it grows its enterprise and global client base. You'll design and implement security strategies that support compliance, protect data, and enable innovation in a fast-paced environment.

Reporting to the VP of Engineering, this role supports engineering, compliance, operations, and leadership teams.

Key Responsibilities

1. Own and maintain the information security roadmap and risk register.
2. Implement security policies across infrastructure, applications, and endpoints.
3. Support teams in embedding security-by-design into the SDLC.
4. Lead compliance audits and assessments (e.g., PCI-DSS, ISO 27001, SOC 2).
5. Coordinate vulnerability assessments, penetration testing, and risk modeling.
6. Develop and maintain incident response procedures.
7. Promote security awareness across the organization.
8. Manage internal IT security needs (cloud, MDM, Google Workspace, password policies).
9. Support client security reviews and enterprise procurement processes.
10. Stay informed on relevant threats and regulatory changes.

Challenges You'll Tackle

• Scaling security in a startup environment without slowing delivery.
• Aligning security across teams and technologies.
• Meeting evolving regulatory and enterprise standards across jurisdictions.

Ideal Candidate Profile

• 4+ years of experience in information security, preferably in fintech.
• Proven experience managing PCI-DSS compliance.
• Strong understanding of governance, risk, and compliance (GRC).
• Familiarity with ISO 27001 and SOC 2 implementation.
• Cloud infrastructure experience (preferably AWS).
• Skilled in secure coding and data protection principles.
• Excellent communication and stakeholder engagement skills.
• Hands-on, pragmatic mindset with an interest in building secure systems from the ground up.

Desired Skills

• Information Security
• PCI-DSS
• ISO 27001
• SOC 2
• GRC
• Cloud Security
• AWS
• Fintech

Desired Work Experience

• 2 to 5 years

About The Employer

A high-growth fintech backed by global investors is building world-class payment infrastructure across Africa. The company helps global brands succeed in South Africa by reducing payment friction, increasing reliability, and ensuring regulatory compliance. Their clients include leading enterprises and globally recognized brands. With scale and security at the core of their mission, they're shaping how the world does business on the continent.