Cybersecurity & Risk Specialist (Coordinator Level) (CPT Onsite) at Datafin Recruitment

ENVIRONMENT:

• A reputable Travel & Tourism Agency seeks the technical expertise of a Cybersecurity & Risk Specialist whose core focus will be to manage technology and Information Security risks while maintaining appropriate security controls. The role will coordinate day-to-day Cybersecurity, Information Security, compliance and technology risk activities, working closely with the Technology & Digital Transformation team and business stakeholders.
• The successful incumbent must possess a Degree/Diploma in Information Security, Cybersecurity/IT/Computer Science or a related field (NQF 6–7) with 3-5 years' relevant experience in Cybersecurity, Information Security, technology risk, IT governance, compliance or a related environment.
• You will also require a practical understanding of Information Security, Risk Management and Governance& POPIA and information protection principles.

DUTIES:

Cybersecurity, Risk & Governance –

• Assist with identifying and assessing technology and information security risks.
• Maintain risk registers, action plans and security documentation.
• Support the implementation and review of security policies, procedures and controls.
• Assist with POPIA and information security compliance activities.
• Support security audits and follow up on remediation actions.
• Prepare reports and updates on Cybersecurity risks and activities.

Security & Incident Support –

• Assist with monitoring security alerts, vulnerabilities and security controls.
• Support Microsoft 365 security activities, including MFA and Conditional Access.
• Assist with Cybersecurity incident management and escalation.
• Track vulnerability and security remediation activities.

​​​​​​​Technology & Digital Projects –

• Support technology projects by identifying security and risk considerations.
• Assist with security assessments of new technologies, cloud and SaaS solutions.
• Support the application of appropriate security controls within digital initiatives.

​​​​​​​Third-Party Risk –

• Assist with supplier and third-party security assessments.
• Support the review and tracking of security requirements and risks relating to service providers.

​​​​​​​Awareness & Resilience –

• Support Cybersecurity awareness and cyber hygiene initiatives.
• Assist with security training and phishing awareness activities.
• Support business continuity and disaster recovery activities and testing.
• Assist with tracking actions arising from security and continuity exercises.

REQUIREMENTS:

Qualifications –

• Degree or Diploma in Information Security, Cybersecurity, IT, Computer Science or a related field (NQF 6–7).

​​​​​​​Experience/Skills –

• 3–5 Years' relevant experience in Cybersecurity, Information Security, technology risk, IT governance, compliance or a related environment.
• Practical understanding of Information Security, Risk Management and Governance.
• Understanding of POPIA and information protection principles.

​​​​​​​Advantageous –

• Exposure to Microsoft 365 security, including MFA, Conditional Access or Defender.
• Exposure to frameworks such as ISO 27001, NIST or CIS.
• Exposure to vulnerability management, audits, third-party risk, business continuity or disaster recovery.

ATTRIBUTES:

• You are a proactive and dependable professional who:
• Takes ownership and follows through.
• Handles sensitive information with integrity and discretion.
• Is organised and detail oriented.
• Communicates clearly with technical and non-technical stakeholders.
• Takes a practical, solutions-focused approach.
• Can work independently while collaborating effectively with others.
• Is comfortable working in a changing technology environment.
• Demonstrates curiosity and a willingness to learn.