InfoSec Risk & Compliance Consultant

WNS; Cape Town; On-site; ZAR 600,000 - 900,000; Full time

Job summary

WNS is seeking an experienced Information Security professional to contribute to risk assessment processes, conduct IT security and privacy impact analyses, and support contract reviews and client audit activities. You will assist in ensuring compliance with information security regulations and advise business leaders on security matters.

The role involves handling security incidents, maintaining risk trackers, and coordinating with risk management teams to drive security awareness and

Qualifications

• Minimum 5-7 years of information security experience.
• Knowledge of IT and information security concepts and frameworks (NIST, ISO 27001).
• Strong written and verbal communication, collaboration across teams.

Responsibilities

• Contributing to information security risk assessment processes
• Conducting infosec risk and impact assessments based on security and privacy principles
• Supporting the review of security and privacy aspects in contracts
• Helping with compliance certification and client audit activities
• Assisting in ensuring adherence to information security and privacy regulations
• Providing support to business and risk management leaders on security matters
• Contributing to the handling of security incidents and data breach investigations
• Helping maintain risk assessment trackers and sensitive information inventories
• Supporting third‑party risk management activities
• Assisting in driving security awareness initiatives
• Conducting review of contractual contracts, privacy contracts / exhibits / privacy agreements
• Handling information security incidents, data breaches investigations
• Supporting business unit leaders and risk management leaders in issues related to information security
• Creation and maintenance of risk assessment trackers and keeping them current
• Ensuring that contract arrangements are in place and being complied with; obtaining necessary evidence for the same and conducting due diligence on subcontractors / third parties
• Experience with privacy regulations (HIPAA / HITECH, GDPR, POPIA, PIPEDA)

Skills

InfoSec concepts

NIST/ISO 27001 knowledge

Communication

Education

Bachelor's degree in IT/CS

Job description

WNS is seeking an experienced Information Security professional to contribute to risk assessment processes, conduct IT security and privacy impact analyses, and support contract reviews and client audit activities. You will assist in ensuring compliance with information security regulations and advise business leaders on security matters.

The role involves handling security incidents, maintaining risk trackers, and coordinating with risk management teams to drive security awareness and