Go
A remote opportunity is open for a cybersecurity professional who can lead compliance and assurance work for a global logistics operation. Advertised by Datafin, this Cybersecurity Assurance and Compliance Specialist role is offered as a remote position, with the listing location shown as Cape Town, and it suits a specialist who is comfortable owning audit readiness, certification programmes and customer security assurance in equal measure.
Datafin Recruitment is the agency behind this vacancy. Established in 1999, Datafin is described as one of South Africa’s leading recruitment companies, owned and managed by two sisters, Lindy and Bev Sollinger, and focused on the technology, digital and online, data, finance and human resources industries. The employer in this case is a global logistics operation that is urgently seeking a cybersecurity assurance and compliance specialist. The role exists to lead and support information security governance, risk management, compliance and security assurance activities, and to keep the organisation’s certification programmes moving forward while maintaining continuous audit readiness.
The work spans five areas. In compliance and certification management, the specialist leads and coordinates activities linked to SOC 2 Type II compliance and audits, CMMC Level 2 certification and maintenance, and ISO/IEC 27001 certification, surveillance audits and continuous improvement. That includes maintaining audit readiness programmes and compliance roadmaps, coordinating internal and external assessments, audits and certification engagements, managing evidence collection and control validation, and tracking audit findings, corrective actions and remediation plans through to completion. The specialist also monitors regulatory, customer and industry framework changes that may affect compliance obligations, and maintains framework mappings between SOC 2, CMMC, ISO 27001, NIST 800-171, CIS Controls and other applicable frameworks, although the wording of that last point is cut off in the source view.
In audit and assurance management, the specialist acts as the primary liaison to auditors, assessors and certification bodies, develops and maintains audit evidence repositories and supporting documentation, and coordinates interviews, testing activities, walkthroughs and auditor requests. Internal compliance reviews and readiness assessments are part of the job, as is establishing and maintaining the policies, standards, procedures and control documentation required for certification, with compliance metrics tracked and reported to leadership on a regular basis.
Customer security assurance is the third area. The specialist owns customer cybersecurity due diligence requests and security questionnaires, coordinates responses to customer assessments, request-for-proposal security sections and vendor security reviews, and maintains a knowledge base of approved security responses and supporting evidence. The role involves partnering with sales, legal, privacy, infrastructure and security teams to provide accurate and timely responses, taking part in customer security discussions to explain the organisation’s security and compliance position, and supporting contract reviews involving cybersecurity requirements and obligations.
The fourth area is cyber risk management: managing and maintaining the enterprise cybersecurity risk register, facilitating periodic cybersecurity risk assessments across business processes, systems and applications, and identifying, assessing, documenting and prioritising cybersecurity risks using established risk methodologies. The specialist develops and maintains risk scoring frameworks and risk treatment processes, coordinates with risk owners on mitigation strategies, compensating controls and remediation, tracks remediation activities and monitors residual risk levels, and supports enterprise risk management initiatives by providing cybersecurity risk input and reporting. The role also covers cyber risk presentations, dashboards and metrics for leadership and governance committees, and the development and maintenance of key risk indicators and compliance metrics to measure programme effectiveness, with risks mapped to applicable regulatory, contractual and compliance requirements.
Finally, in governance and security programme support, the specialist supports the development and maintenance of information security policies, standards and procedures, coordinates annual policy reviews and control effectiveness assessments, assists with third-party risk management and vendor security reviews, supports security awareness and compliance training initiatives, and promotes continuous improvement of governance, compliance and risk management practices, contributing to security programme maturity and strategic compliance initiatives.
The listing states that a Bachelor’s Degree in Information Security, Cybersecurity, Information Technology, Risk Management or a related field is required, although the wording of the degree list is cut off in the source view, so applicants should check the original advert for the complete wording. Candidates need a minimum of five years of experience in cybersecurity, information security, IT audit, risk management or governance, and a minimum of three years of direct experience supporting one or more of SOC 2, ISO/IEC 27001, CMMC, NIST 800-171, internal or external audits, or security certification programmes. Experience is also required in managing compliance documentation, evidence collection and audit coordination, in conducting risk assessments and maintaining risk registers, and in responding to customer cybersecurity questionnaires and security assessments.
On tools and working style, the listing asks for proficiency with Microsoft 365 productivity and collaboration tools, including Teams, Word and Excel, and comfort with governance, risk, compliance, policy management, reporting and documentation platforms. The specialist should be able to read and interpret business cases, project plans, risk reports, policies, procedures and training material, and to prepare clear written summaries. The listed attributes are strong written and verbal communication skills, a demonstrated ability to influence stakeholders across multiple business functions and regions, and strong analytical, organisational and problem-solving skills. The salary for this role is undisclosed in the listing, and the position is permanent at specialist level. The listing was posted on 28 October 2026 and is shown as expiring in 19 days.
This vacancy is advertised on CareerJunction by Datafin, and the Apply button on this page opens the original CareerJunction listing. Apply only through that original advert, and be cautious of anyone who contacts you outside that channel asking for payment or personal banking details in exchange for a job offer. A genuine recruiter will not ask you to pay to secure an interview or a placement.
Before applying, prepare evidence that matches the breadth of this role. Gather examples of audits or certifications you have led or supported, such as SOC 2, ISO 27001 or CMMC work, and be ready to explain how you kept evidence organised and findings tracked to completion. If you have answered customer security questionnaires or supported request-for-proposal security sections, note the frameworks involved and the outcome. Candidates with risk register experience should be ready to describe how they scored, prioritised and monitored risks, and how they reported them to leadership. Because the listing is remote, it is also worth confirming the expected working hours, time-zone overlap and any travel for audits during the process.
Applications are made through the original CareerJunction listing, where Datafin reviews submissions against the stated requirements. Shortlisted candidates can expect to discuss their certification and audit experience, their approach to customer security assurance, and their familiarity with the frameworks named in the listing. Since the role is the primary point of contact for auditors and certification bodies, interviewers are likely to probe communication skills and the ability to influence stakeholders across different teams and regions.
This page is for information only and is not the employer or the recruiter. Details such as the remote working arrangement, the Cape Town listing location and the requirements are taken from the listing as shown, and some listing wording is cut off in the source view, so readers should check the original advert for complete wording before applying. The salary is undisclosed. Note that the role is advertised as remote while the listing location field shows Cape Town.
#SouthAfricaJobs #JobsInSouthAfrica #CybersecurityJobs #ComplianceJobs #InformationSecurityJobs #RiskManagementJobs #RemoteJobs #CapeTownJobs
This listing was originally posted by Datafin — your application opens on their original job advert.
Apply on Datafin's website →