Hire Resolve – Top Recruitment Agency
Ticking All Your Recruitment Needs
Ticking All Your Recruitment Needs
A worldwide logistics company with over 40 years of experience providing world-reowned supply chain services is looking for a Cybersecurity Assurance and Compliance Specialist to join their team in Gqeberha, Eastern Cape.
Job Purpose:
The Cybersecurity Assurance & Compliance Specialist is a key member of the Global IT Security team, responsible for leading the organization’s governance, risk, and compliance (GRC) activities. This role ensures the organization maintains and advances its security posture through the management of critical certification programs (SOC 2 Type II, CMMC Level 2, ISO/IEC 27001) and by overseeing enterprise cyber risk management.
This position serves as the primary point of contact for external auditors, certification bodies, customers, and internal stakeholders, ensuring continuous audit readiness and compliance with all applicable regulatory and contractual requirements. The ideal candidate will be a strong communicator who can translate complex technical requirements into actionable business processes.
Compliance & Certification Management
Lead and coordinate all activities for SOC 2 Type II, CMMC Level 2, and ISO/IEC 27001 certifications, including audits and continuous improvement.
Maintain audit readiness programs, compliance roadmaps, and a clear framework mapping between standards (e.g., NIST 800-171, CIS Controls).
Manage evidence collection, control validation, and the tracking of audit findings and corrective actions through to completion.
Monitor changes in regulatory, customer, and industry frameworks that could impact compliance obligations.
Audit & Assurance Management
Act as the primary liaison to external auditors, assessors, and certification bodies.
Develop and maintain audit evidence repositories and supporting documentation.
Coordinate all auditor requests, including interviews, walkthroughs, and testing activities.
Perform internal compliance reviews and readiness assessments.
Establish and maintain policies, standards, and control documentation.
Track and report on compliance metrics to leadership.
Customer Security Assurance
Own the process for responding to customer cybersecurity due diligence requests, security questionnaires, and RFP security sections.
Maintain a knowledge base of approved security responses and supporting evidence.
Partner with cross-functional teams (Sales, Legal, Privacy, Infrastructure) to provide accurate and timely responses.
Participate in customer security discussions to articulate the organization’s security posture.
Support contract reviews related to cybersecurity requirements.
Cyber Risk Management
Manage and maintain the enterprise cybersecurity risk register.
Facilitate regular risk assessments across business processes, systems, applications, cloud environments, and third-party vendors.
Identify, assess, document, and prioritize cybersecurity risks using established methodologies.
Develop and maintain risk scoring frameworks and treatment plans.
Coordinate with risk owners to establish mitigation strategies and track remediation activities.
Prepare risk dashboards, reports, and presentations for leadership and governance committees.
Develop and maintain Key Risk Indicators (KRIs) to measure program effectiveness.
Governance & Security Program Support
Support the development and maintenance of information security policies, standards, and procedures.
Coordinate annual policy reviews and control effectiveness assessments.
Assist with third-party risk management and vendor security reviews.
Support security awareness and compliance training initiatives.
Contribute to the continuous improvement of the overall security program maturity.
Required Experience
Minimum 5 years of experience in cybersecurity, information security, IT audit, risk management, governance, or a related compliance role.
Minimum 3 years of direct experience supporting one or more of the following: SOC 2, ISO/IEC 27001, CMMC, NIST 800-171.
Proven experience managing compliance documentation, coordinating audits, and collecting evidence.
Demonstrated experience conducting risk assessments and maintaining risk registers.
Experience in responding to customer security questionnaires and assessments.
Technical & Software Skills
Proficient with Microsoft 365 suite (Teams, Word, Excel, PowerPoint, SharePoint).
Comfortable using GRC platforms, policy management tools, and other reporting/documentation software.
Ability to read and interpret business cases, project plans, risk reports, and technical documentation.
Strong analytical skills to prepare clear, concise written summaries and reports.
Preferred Education & Experience
Bachelor’s degree in Information Security, Cybersecurity, Information Technology, Risk Management, Business Administration, or a related discipline is preferred.
An equivalent combination of education, professional certification (e.g., CISSP, CISM, CRISC, CISA), and relevant experience may be considered.
Contact Hire Resolve for your next career-changing move.
Our client is offering a highly competitive salary for this role based on experience.
Apply for this role today, contact Gaby Turner at Hire Resolve or on LinkedIn. You can also visit the Hire Resolve website: hireresolve.us or email us your CV: itcareers@hireresolve.za.com
We will contact you telephonically in 3 days should you be suitable for this vacancy. If you are not suitable, we will put your CV on file and contact you regarding any future vacancies that arise.
