Information Security Management System (ISMS) Manager - Johannesburg (Hybrid) - R40 000 - R45 000

SUMMARY:
The purpose of the role is to lead the organisation''s information security governance, enterprise risk management, and regulatory compliance activities within a highly regulated environment.

POSITION INFO:

Information Security Management System (ISMS) Manager - Johannesburg (Hybrid) - R40 000 - R45 000

Lead the organisation''s information security governance, enterprise risk management, and regulatory compliance activities within a highly regulated environment.

About Our Client
The organisation operates within a highly regulated sports betting or a similarly stringent digital transaction environment. The business focuses on effectively managing security, risk, and compliance obligations across multiple international jurisdictions.

The Role: Information Security Management System (ISMS) Manager
The purpose of the role is to lead the organisation''s information security governance, enterprise risk management, and regulatory compliance activities within a highly regulated environment. The main focus areas are establishing, maintaining, and continuously improving the organisation''s ISO 27001-aligned Information Security Management System, while providing strategic oversight of cyber risk, operational risk, and control effectiveness.

Key Responsibilities

• Manage 5-8 years of experience within a sports betting or a similarly stringent digital transaction environment while leading the design, implementation, and continuous enhancement of the organisation''s Enterprise Risk Management framework in alignment with ISO 31000 and business strategy.

• Own the enterprise-wide risk management process, ensuring risks are identified, assessed, prioritised, mitigated, monitored, and reported effectively across all business functions.

• Maintain management oversight of compliance with standards and regulations including POPIA, GDPR, and UKGC requirements.

• Coordinate regulatory and certification audits across internal teams, external service providers, and international stakeholders.

• Chair and facilitate risk assessment workshops with business and technical stakeholders, driving accountability for risk ownership and treatment actions.

• Prepare and present clear, concise, and data-driven reports to executive management and the Audit and Risk Committee on risk exposure, audit outcomes, security maturity, and remediation status.

• Build and maintain strong cross-functional relationships with Technology, Product, Operations, Legal, Compliance, and executive leadership to embed risk-aware decision-making.

About You

• 5-8 years’ experience within a sports betting or a similarly stringent digital transaction environment.

• Tertiary qualification (bachelor''s degree or higher) in Information Technology, Cyber Security, Risk Management, or a cognate discipline.

• Hold professional certifications such as Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), or ISO 27001 Lead Implementer/Auditor.

• Demonstrate excellent comprehension of international compliance frameworks and the operational mechanics within the industry.

• Possess exceptional analytical acumen and the capacity to articulate complex technical and risk-related paradigms to non-technical stakeholders.