GRC (Governance Risk and Compliance) Specialist - Cape Town or Johannesburg - R40 000 – R45 000

About Our Client

Our client is a fast-growing B2B SaaS startup transforming cybersecurity compliance for businesses worldwide. Its Compliance-as-a-Service platform simplifies frameworks for startups, scale-ups, and enterprises.

The Role: GRC (Governance Risk and Compliance) Specialist

This role exists to guide customers through complex compliance processes, ensuring their success and building trust in their organizations. It contributes to the business by providing exceptional support, driving product improvements based on customer feedback, and delivering top-tier compliance solutions. Main focus areas include preparing SaaS companies for security audits, advising on regulations, supporting clients throughout their compliance journey, and managing security questionnaires and policies.

Key Responsibilities

• Possess at least 2 years of experience in Technology Risk, Compliance, GRC, CISO, or a similar position.

• Prepare SaaS companies for security audits, including assessment, preparation, and audit management.

• Assist customers with filling out vendor security questionnaires and creating policies, procedures, and risk assessments using the product.

• Advise customers on best practices and evolving security regulations.

• Establish and maintain long-term relationships with clients by providing hands-on support throughout their compliance journey.

• Coordinate activities across multiple teams and integration points to ensure seamless execution.

• Drive product improvements by incorporating market feedback and customer needs.

• Articulate compliance concepts and the value proposition clearly to clients while writing and presenting well-structured documentation and processes.

About You

• At least 2 years of experience in Technology Risk, Compliance, GRC, CISO, or a similar position.

• Extensive experience managing compliance projects and audits such as SOC 2 and ISO 27001.

• Background in answering security questionnaires.

• Proficiency in managing multiple projects and meeting deadlines using tech tools.

• Excellent verbal and written communication abilities.

• Strong self-starter with a solution-focused and positive attitude.

• Bachelor''s degree in Engineering, Information Systems, Computer Science, Law, Accounting, or Business (advantageous).

• Information Security certifications such as CISSP, CISA, CISM, CCSK, or ISO 27001 Lead Implementer (advantageous).