Cybersecurity & Risk Specialist
Cape Town Tourism
Overview
The Cybersecurity & Risk Specialist will help protect Cape Town Tourism by identifying and managing technology and information security risks, strengthening controls and governance, and ensuring security keeps pace with our digital transformation.
Requirements
- Diploma or Degree in Information Security, Cybersecurity, Computer Science, Information Technology or a related field (NQF 6–7)
- 5–7 years’ experience in cybersecurity, information security, risk, governance or a related technology security role
- Experience within a medium to large organisation, particularly across cloud and SaaS environments
Responsibilities
- Identify, assess and monitor cybersecurity and information security risks
- Maintain organisational risk registers, risk treatment plans and security control frameworks
- Develop and maintain cybersecurity policies, standards and procedures
- Support the development and implementation of the cybersecurity strategy
- Provide clear risk reporting and insights to management and governance structures
- Support compliance with POPIA and requirements relating to access control, information classification and data protection
- Coordinate security audits and track the remediation of findings
- Monitor security alerts, vulnerabilities and the effectiveness of security controls
- Support Microsoft 365 security, including Microsoft Defender, Conditional Access, Data Loss Prevention (DLP) and Multi-Factor Authentication (MFA)
- Coordinate cybersecurity incident response and investigations
- Drive vulnerability remediation and strengthen preventative and detective security controls
- Participate in technology projects to ensure security requirements are considered from project inception
- Embed secure-by-design principles across digital transformation initiatives
- Conduct cybersecurity assessments of suppliers, vendors and service providers
- Implement and manage cybersecurity awareness and cyber hygiene programmes
- Coordinate security training and phishing simulations
- Support business continuity planning, testing and improvement
How to apply
Verify before you apply
SpanSam summarises opportunities for easier discovery. Always confirm the closing date, eligibility requirements and submission instructions on the original source before sending personal information or documents.
About this listing: SpanSam is an opportunity discovery service and is not the hiring employer unless explicitly stated. Application decisions and source-listing changes are controlled by the employer or institution.