GRC Administrator - Cape Town at Impact

Why this role is exciting:

• As an GRC Controls Administrator you will work with internal and external stakeholders across all squads to contribute to the maturation of impact.com's systems, controls, applications and processes. By assessing and recommending standards and controls, you will work within a team to influence the improvement of impact.com's Cybersecurity Program and work closely with employees and partners to ensure standards are measured, upheld and matured.
• As an individual, you complete tasks and projects with minimal supervision and act as a vital member of the global information security team.

What you will be doing:

• Participate as a member of the Information Security team in all compliance projects and engagements and initiatives
• Participate in annual PCI-DSS, ISO and SOC assessments and audit
• Assist with requests from internal and external partners and contribute to the Third Party Risk Management process such as vendor onboarding and continuous vendor .
• Participate in engagements with teams across business units to translate governance requirements and standards into tangible controls and
• Stay abreast of emerging compliance regulations and standards with the aim of constantly improving the organisations security posture.
• Be active in the Cybersecurity communities and stay informed on current threats, attack techniques and strategies
• Open to change and ability to pivot to different priorities and situations
• Must be able to work well independently as well as part of a larger team
• Ability to work on a diverse team with a diverse range of people

Does this sound like you?

• Knowledge of Security Frameworks and best practices (PCI-DSS, NIST, ISO27001, etc).
• Experience in IT management workflow solutions such as ServiceNow
• Risk Management frameworks and processes.
• Experience in IT engineering, security governance or related fields
• Threat and vulnerability management policies, systems and remediations
• Ability to translate control requirements into technical
• Documenting, implementing and measuring controls and processes
• Able to conduct assessments and communication of the results thereof
• An industry related certification (ex. CEH, CISSP, CISA).
• Experience with technical and narrative writing.