Information Security Analyst at Badger Holdings (Pty) Ltd

Key Responsibilities:

 Strategy, Roadmap & Investment

• Maintain IS business-as-usual tracking, monitoring progress against deliverables and flagging risks or delays to the Head of Information Security.

People Leadership & Function Development

• Contribute to a collaborative culture, setting a positive example and representing the team.
• Proactively develop IS knowledge and capability, engaging with development opportunities as agreed.
• Explore and adopt AI tools to improve the efficiency and quality of their own work, and contribute ideas for broader adoption.
• Identify and suggest improvements to IS team processes, templates, and coordination tools to support function efficiency and maturity.
• Operate effectively as part of a small, cross-functional team, bringing flexibility and breadth to support the IS function’s objectives.

 Governance & Framework Ownership

• Maintain the ISPF structured-artefact repositories for IS governance documentation, ensuring consistent version control, naming conventions, and accessibility.
• Own and maintain Pacific’s IS registers, including the IS issue, exemption, control-testing, and third-party assurance registers, keeping all records current and accurate, and engaging the relevant stakeholders to obtain updates as required.
• Coordinate all IS governance forum logistics, including the ISWG and Digital Steering Committee (DSC), managing scheduling, agenda preparation, and paper coordination and distribution, and tracking and following up all meeting actions.
• Produce IS reporting packs, collating data from registers, control-testing outcomes, and assurance activities to provide accurate, current information for governance reporting and decision-making.

Risk, Assurance & Compliance

• Support Pacific’s compliance with APRA CPS 234, including audit and assurance activities as required.
• Monitor IS risk assessment findings and open issues, tracking status and escalating overdue items to ensure timely remediation.

Security Operations & Resilience

• Maintain the IS activity calendar for scheduled recurring security activities, including penetration testing, backups, access reviews, incident response exercises, and disaster recovery tests, managing scheduling, communications, and stakeholder visibility.
• Track completion of recurring BAU security activities performed by the IT Manager’s team, flagging gaps or delays.

Security Awareness & Stakeholder Engagement

• Monitor emerging threats and regulatory developments, preparing draft threat and posture bulletins for the Head of Information Security to review, contextualise, and finalise.
• Support delivery of Pacific’s security awareness program under the direction of the IS Senior Analyst, maintaining the awareness calendar, tracking completion of activities, and coordinating logistics for scheduled sessions.

Expanded Governance (including AI)

• Support the IS function's expanding governance remit beyond IS, contributing to additional governance domains as required. This includes maintaining registers and policy framework artefact repositories, providing secretariat support, and preparing governance reporting. The current assigned governance domain is AI governance, which forms a significant part of this role.

Requirements

• Genuine interest in developing expertise across, IS, AI governance, and technology risk.
• Prior experience in a coordination, administrative, or operational support role, where you managed recurring tasks, schedules, or documentation to deadline.
• Excellent written communication skills, with demonstrated ability to prepare clear, professional documentation such as reports, minutes, or governance materials.
• Confidence engaging and building working relationships with a range of stakeholders, including senior stakeholders, in a clear and professional manner.
• Attention to detail and a structured, methodical approach to administration, record-keeping, and register maintenance.
• Collaborative working style, with the initiative to work autonomously and follow through on actions without prompting.
• Proficiency in Microsoft 365 tools including Word, Excel, PowerPoint, Teams, and SharePoint.

Bonus Skills

• Tertiary qualification in information technology, cybersecurity, business, or a related discipline, or equivalent practical experience.
• Understanding of IS frameworks such as ISO 27001 or NIST CSF at a conceptual level.
• Experience coordinating governance committees, working groups, or board-level forums.