GRC Consultant CPT

Datafin; Cape Town; On-site; ZAR 60,000 - 80,000; Full time

Job summary

A dynamic cybersecurity compliance firm in Cape Town is looking for a driven GRC Consultant to join their team. This role involves guiding customers through compliance processes, preparing them for audits like SOC 2 and ISO 27001, and ensuring their success with the product. Ideal candidates have at least 2 years' experience in compliance roles, excellent communication skills, and a relevant degree. This position offers a chance to contribute to a fast-growing organization that prioritizes customer success.

Qualifications

• At least 2 years in Technology Risk, Compliance, GRC, CISO, or similar positions.
• Extensive experience managing compliance projects and audits.
• Proficiency in managing multiple projects and meeting deadlines.

Responsibilities

• Prepare SaaS companies for security audits such as SOC 2 and ISO 27001.
• Assist customers with vendor security questionnaires and risk assessments.
• Establish long-term relationships with clients for compliance needs.

Skills

Technology Risk Management

Compliance Audits

Vendor Security Questionnaires

Project Management

Excellent Communication

Education

Bachelor's degree in a relevant field

Information Security certifications (CISSP, CISA, etc.)

Job description

GRC Consultant - CPTOther

Cape Town - Western Cape - South Africa

ENVIRONMENT

A fast-growing B2B SaaS startup transforming cybersecurity compliance for businesses worldwide is seeking a driven and knowledgeable GRC to join their GRC team. In this role, you will guide customers through complex compliance processes, ensuring their success and building trust in their organizations. Your mission is to provide exceptional support, drive product improvements based on feedback, and contribute to the Groups growth by delivering top-tier compliance solutions.

DUTIES

• Prepare SaaS companies for security audits such as SOC 2 and ISO 27001, including assessment, preparation, and audit management.
• Assist customers with filling out vendor security questionnaires and creating policies, procedures, and risk assessments using their product.
• Advise customers on best practices and evolving security regulations.
• Establish and maintain long‑term relationships with clients by ensuring their compliance needs are met.
• Provide hands‑on support throughout their compliance journey.
• Coordinate activities across multiple teams and integration points, ensuring seamless execution.
• Drive product improvements by incorporating market feedback and customer needs.
• Clearly articulate compliance concepts and the group's value proposition to clients. Write and present well‑structured documentation and processes.

REQUIREMENTS

• At least 2 years in Technology Risk, Compliance, GRC, CISO, or a similar position.
• Extensive experience managing compliance projects and audits (e.g., SOC 2, ISO 27001).
• Background in answering security questionnaires.
• Proficiency in managing multiple projects and meeting deadlines using tech tools.
• Excellent verbal and written communication abilities.
• Strong self‑starter with a solution‑focused and positive attitude.
• Bachelor's degree in Engineering, Information Systems, Computer Science, Law, Accounting, or Business (advantageous).
• Information Security certifications such as CISSP, CISA, CISM, CCSK, or ISO 27001 Lead Implementer (advantageous).