Information Security Officer

Eqplus; Cape Town; On-site; ZAR 600,000 - 900,000; Full time

Job summary

A high-growth fintech company in Cape Town is seeking an Information Security Officer to lead its security function. The role involves designing security strategies, managing compliance with industry standards, and fostering security awareness across teams. The ideal candidate will have 4+ years of experience in information security and a strong background in compliance.

Qualifications

• 4 years of experience in information security, preferably in fintech.
• Proven experience managing PCIDSS compliance.
• Strong understanding of governance, risk, and compliance (GRC).
• Familiarity with ISO 27001 and SOC 2 implementation.
• Cloud infrastructure experience (preferably AWS).
• Skilled in secure coding and data protection principles.
• Excellent communication and stakeholder engagement skills.
• Hands-on pragmatic mindset with an interest in building secure systems.

Responsibilities

• Own and maintain the information security roadmap and risk register.
• Implement security policies across infrastructure applications and endpoints.
• Support teams in embedding security-by-design into the SDLC.
• Lead compliance audits and assessments (e.g., PCIDSS, ISO 27001, SOC 2).
• Coordinate vulnerability assessments, penetration testing, and risk modelling.
• Develop and maintain incident response procedures.
• Promote security awareness across the organisation.
• Manage internal IT security needs (cloud, MDM, Google Workspace, password policies).
• Support client security reviews and enterprise procurement processes.
• Stay informed on relevant threats and regulatory changes.

Skills

International Development

Information Systems

Community

Information Technology Sales

Corporate Recruitment

Job description

A highgrowth fintech backed by global investors is building worldclass payment infrastructure across Africa. The company helps global brands succeed in South Africa by reducing payment friction increasing reliability and ensuring regulatory compliance.

Their clients include leading enterprises and globally recognised brands. With scale and security at the heart of their mission theyre shaping how the world does business on the continent.

Role Overview

As the Information Security Officer you will lead the companys information security function as it grows its enterprise and global client base. Youll design and implement fitforpurpose security strategies that support compliance protect data and enable innovation in a fastpaced environment.

Reporting to the VP of Engineering this crossfunctional role supports engineering compliance operations and leadership teams.

Key Responsibilities

• Own and maintain the information security roadmap and risk register
• Implement security policies across infrastructure applications and endpoints
• Support teams in embedding securitybydesign into the SDLC
• Lead compliance audits and assessments (e.g. PCIDSS ISO 27001 SOC 2)
• Coordinate vulnerability assessments penetration testing and risk modelling
• Develop and maintain incident response procedures
• Promote security awareness across the organisation
• Manage internal IT security needs (cloud MDM Google Workspace password policies)
• Support client security reviews and enterprise procurement processes
• Stay informed on relevant threats and regulatory changes

Challenges Youll Tackle

Scaling security in a startup environment without slowing delivery

Aligning security across teams and technologies

Meeting evolving regulatory and enterprise standards across jurisdictions

Ideal Candidate Profile

4 years of experience in information security preferably in fintech

Proven experience managing PCIDSS compliance

Strong understanding of governance risk and compliance (GRC)

Familiarity with ISO 27001 and SOC 2 implementation

Cloud infrastructure experience (preferably AWS)

Skilled in secure coding and data protection principles

Excellent communication and stakeholder engagement skills

Handson pragmatic mindset with an interest in building secure systems from the ground up

Required Experience :

Unclear Seniority

Key Skills

International Development,Information Systems,Community,Information Technology Sales,Corporate Recruitment

Employment Type : Contract

Experience : years

Vacancy : 1