InfoSec Governance & Compliance Lead

EnableSA; Gqeberha; On-site; ZAR 600,000 - 900,000; Full time

Job summary

EnableSA in Port Elizabeth, South Africa, seeks an experienced Cybersecurity Assurance and Compliance Specialist to lead information security governance, risk, and compliance across a global business environment. The role focuses on implementing security frameworks, policies, and remediation across operations.

You will oversee risk management, audits, and awareness programs while coordinating third-party security reviews and ongoing governance initiatives to strengthen the organisation's

Qualifications

• 5+ years of experience in information security, cybersecurity, risk management, governance, or related fields.
• Bachelor's degree in Information Security, Cybersecurity, IT, risk management, or related field.
• Strong understanding of information security principles and risk management processes.
• Experience with security policies, standards, and awareness programs.
• Familiarity with ISO 27001, NIST CSF, SOC 2, CIS Controls, or equivalent.
• Professional certification such as CISSP, CISM, CRISC, CGRC, or ISO 27001 Lead Implementer preferred.

Responsibilities

• Lead development, implementation, and improvement of information security policies, standards, and governance.
• Oversee identification, assessment, monitoring, and mitigation of information security risks and maintain risk registers.
• Coordinate security audits, assessments, and compliance initiatives with remediation reporting.
• Drive security awareness programs for employees and stakeholders to strengthen security culture.
• Support third-party security risk management with vendor reviews and remediation efforts.

Skills

Information security

Risk management

Governance

Compliance

Education

Bachelor's degree in Information Security / Cybersecurity / IT

Job description

EnableSA in Port Elizabeth, South Africa, seeks an experienced Cybersecurity Assurance and Compliance Specialist to lead information security governance, risk, and compliance across a global business environment. The role focuses on implementing security frameworks, policies, and remediation across operations.

You will oversee risk management, audits, and awareness programs while coordinating third-party security reviews and ongoing governance initiatives to strengthen the organisation's