Information Security Manager

Parvana; Cape Town; On-site; ZAR 1,200,000 - 1,800,000; Full time

Job summary

Parvana is seeking a senior Information Security Leader in Cape Town to design and manage a comprehensive security program aligned with ISO 27001, SOC 2, and NIST. You will act as DPO, drive incident response, and ensure global privacy compliance across GDPR, CCPA, and POPIA.

You will partner with IT, Engineering, HR and Legal to embed security into all projects, perform risk assessments, and lead remediation prioritisation.

Qualifications

• 6+ years of information security management experience.
• CISSP or CISM certification would be ideal.
• Tertiary qualification in a relevant field is beneficial.
• Proven track record delivering complex security programs and managing certification processes (ISO/SOC 2/NIST).
• Experience in security incident management, root cause analysis, and disaster recovery planning.

Responsibilities

• Design and maintain an Information Security Program aligned with ISO 27001, SOC 2, and NIST.
• Establish enterprise-wide security policies and oversee privacy compliance (GDPR, CCPA, POPIA).
• Serve as the Data Protection Officer (DPO) and lead incident response efforts.
• Collaborate with IT, Engineering, HR and Legal to integrate security requirements.
• Conduct regular risk assessments and maintain a central risk register.
• Drive compliance with ISO 27001, SOC 2, and NIST frameworks.
• Oversee security controls (firewalls, encryption, IDS, identity management).
• Monitor emerging threats and advise on cloud architecture and secure SDLC.

Skills

Security governance

Incident management

Risk assessment

Compliance

Education

Bachelor's degree in Computer Science or Information Security

Job description

Location: Cape Town | Work Type: Hybrid

About our client

Our client is a global investment advisory firm focusing on long-term value creation through investment strategies. They work with a diverse group of institutional partners and pride themselves on their collaborative, sustainable, inclusive culture and performance. You are welcome to go into the office daily or to take advantage of their hybrid in-office / remote benefit. This company places significant investment in employee wellness, their benefits which are on top of generous basic salaries, are industry leading in their generosity. Our client is large, offering fantastic career development opportunities but also very dynamic, they track as many metrics as possible in order to continuously improve - they spare no expense on the tools to do so. Automation, AI and R&D are pillars of their business framework which ensures you should never be at risk of falling behind or getting stuck working with old legacy software. Culturally they are very cosmopolitan and diverse, you will be working with the best globally.

What you will be doing

• Design and maintain an Information Security Program aligned with industry standards like ISO 27001, SOC 2, and NIST.
• Establish enterprise-wide security policies and ensure adherence to global privacy regulations such as GDPR, CCPA, and POPIA.
• Serve as the Data Protection Officer (DPO) and lead all incident response efforts, from investigation through containment.
• Partner with IT, Engineering, HR, and Legal teams to integrate security requirements.
• Conduct regular risk assessments, maintain a central risk register, and execute prioritised gap analysis and remediation plans.
• Drive and maintain compliance with critical certifications and frameworks, including ISO 27001, SOC 2, and NIST.
• Oversee the implementation of essential security controls, such as firewalls, encryption, intrusion detection, and identity management.
• Monitor emerging threats to provide proactive security recommendations, manage InfoSec projects, and offer guidance on cloud architecture and secure development (SDLC).

What our client is looking for

• A relevant tertiary qualification would be beneficial (Computer Science, Information Security, etc.).
• A relevant certification would be ideal (e.g., Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM)).
• 6+ years of relevant experience in information security management, preferably within software development or enterprise environments.
• Proven track record in delivering complex security programs and managing certification processes (ISO/SOC 2/NIST).
• Experience in security incident management, root cause analysis, and disaster recovery planning.