Cyber Security Analyst - GRC

JOB TITLE:

Cyber Security Analyst - GRC

LOCATION:

Cape Town (Hybrid / Remote)

ABOUT CYBERLOGIC:

Cyberlogic is a trusted Managed Solutions Provider with offices in South Africa, Mauritius, and the UK. Serving a diverse range of clients, spanning numerous industries, including the international maritime sector, Cyberlogic specialises in IT leadership, cyber security, cloud solutions, and business intelligence. For almost three decades, Cyberlogic has been committed to enabling digital transformation through delivering unquestionable value.

Our delivery focus has enabled us to build up a national and international footprint of loyal clients that rely on us to provide transparent, open guidance to improve their processes, grow their businesses, and secure their data.

Cyberlogic is part of the Hyperclear Technology group, which boasts a diverse technology offering including robotic process automation (RPA), business process management (BPM) data analytics, and decisioning technology.

Through our non-profit, R4C (Ride for a Child), we partner with Bright Start Education Foundation, an organisation empowering deserving learners from underprivileged communities, providing holistic support and guidance throughout their educational careers.​

OUR VALUES:

• We challenge ourselves to be more AWESOME

• We are driven to KEEP learning and EVOLVING

• We look beyond symptoms to identify and RESOLVE ROOT CAUSES

• We hold each other accountable through CANDID and constructive FEEDBACK

• We respect and care for each other and know we will only SUCCEED if we work AS A TEAM

• We CARE deeply ABOUT the success of CYBERLOGIC

• We FINISH WHAT WE START

• We always GIVE OUR BEST even if it means putting in the hard yards

• We KEEP THINGS SIMPLE

PURPOSE OF POSITION:

As a Cyber Security Analyst - GRC, you will be responsible for conducting cyber security governance, risk management, and compliance projects for clients and internally. You will contribute to the development of policies, procedures and standards, assess and mitigate risks, and ensure clients adheres to relevant regulations and standards. You will play a key role in developing security metrics, conducting risk assessments, performing gap analyses, supporting and conducting audits and reviews, as well as engaging with clients on project-based work.

KEY RESPONSIBILITIES:

Governance: 

• Develop and maintain cyber security policies, procedures, and standards aligned with operational needs and relevant regulatory or governance frameworks, while collaborating with clients to tailor and integrate these policies within their organisations.
• Conduct policy reviews, identifying areas for improvement and ensuring policies remain relevant and effective.
• Collaborate with stakeholders to finalise and gain approval for newly developed policies and procedures, ensuring alignment with business needs.
• Research and evaluate industry frameworks and regulations to identify those most applicable to the client, analysing regulatory requirements across categories (e.g., privacy, cybersecurity) to develop tailored compliance policies, procedures and frameworks.
• Assist in developing and enhancing the organisation's cyber security related strategies and frameworks.
• Support the implementation of remediation measures.
• Present to clients.

Risk Management:

• Conduct thorough cyber security risk assessments, including third party assessments, across all IT systems, applications, and networks to identify threats and vulnerabilities.
• Identify and evaluate emerging security risks and create actionable remediation plans to address them.
• Develop and maintain a comprehensive risk register by keeping it updated with identified risks and corresponding control measures.
• Collaborate with stakeholders as needed by providing detailed information and evidence on identified risks to support remediation activities, and report to clients on critical security risks, recommending corrective or remediation actions.
• Support the development of risk management frameworks, mitigation strategies, and documentation.
• Present to clients.

Compliance:

• Assess compliance with industry standards and regulatory requirements such as PCI-DSS and POPIA to ensure…