Cybersecurity Assurance and Compliance Specialist (Hybrid)

Our client in Port Elizabeth is seeking an experienced Cybersecurity Assurance & Compliance Specialist to drive and strengthen their global cybersecurity governance, risk, and compliance initiatives. This role is ideal for a cybersecurity professional who enjoys working at the intersection of security, risk management, compliance, and business operations.

The successful candidate will play a key role in maintaining industry-recognised security certifications, managing cybersecurity risks, supporting audits and assessments, and ensuring the organization remains compliant with regulatory, customer, and industry requirements. Working closely with IT, Legal, HR, Audit, and business stakeholders, you will help shape and enhance the organisation's overall security posture.

• Lead and support compliance initiatives relating to recognized cybersecurity and compliance frameworks.
  
• Coordinate internal and external audits, assessments, and certification activities.
  
• Maintain audit readiness and ensure accurate documentation and evidence is available for review.
  
• Monitor audit findings and oversee remediation activities through to completion.
  
• Act as the primary point of contact for auditors, assessors, certification bodies, and internal stakeholders.
  
• Develop and maintain security policies, procedures, standards, and governance documentation.
  
• Manage customer security questionnaires, due diligence requests, and security assessments.
  
• Collaborate with internal departments to provide accurate responses to customer and vendor security reviews.
  
• Maintain and enhance the organisation's cybersecurity risk management processes.
  
• Facilitate risk assessments across systems, applications, business processes, cloud environments, and third-party vendors.
  
• Identify, evaluate, prioritize, and track cybersecurity risks and mitigation plans.
  
• Manage and maintain the enterprise cybersecurity risk register.
  
• Develop risk reporting dashboards, compliance metrics, and key risk indicators for leadership.
  
• Support third-party risk management and vendor security review activities.
  
• Assist with security awareness, compliance training, and governance initiatives.
  
• Research emerging regulatory and compliance requirements and assess business impact.
  
• Drive continuous improvement of cybersecurity governance, compliance, and risk management practices.