Information Security & Compliance Officer

Responsibilities

• Monitor systems, networks, and security dashboards for suspicious activity and emerging threats
• Investigate, triage, and respond to security incidents and perform root cause analysis
• Maintain and manage endpoint protection platforms, SIEM systems, and security tooling
• Develop and implement incident response plans to ensure service continuity
• Conduct regular vulnerability scans, security assessments, and support penetration testing
• Collaborate with IT teams to remediate vulnerabilities and harden server, network, and cloud configurations
• Maintain and enforce POPIA compliance policies, procedures, and governance frameworks
• Manage POPIA-related requests, data subject access requests, and breach notifications
• Maintain security risk registers, incident logs, and vulnerability tracking documentation

Requirements

• 5–7 years of hands-on experience in cybersecurity or IT security engineering
• Proven experience with SIEM systems, SOC tooling, and endpoint protection platforms
• Practical experience with POPIA compliance and data protection requirements
• Exposure to cloud environments including Azure, AWS, or GCP
• Strong understanding of networking fundamentals (TCP/IP, DNS, DHCP) and Windows environments
• Experience with Entra ID / Azure AD and identity and access management
• Familiarity with threat frameworks such as MITRE ATT&CK
• Relevant degree or diploma in IT, Computer Science, or Cybersecurity

Preferred Qualifications

• Scripting ability in BASH or Python
• Experience in an ISP or telecoms environment
• Certifications such as CISM, CISSP, CEH, CompTIA Security+, or ISO 27001

Benefits

• Exposure to a dynamic workplace
• Internal academy for skill growth
• Group Risk Benefits
• Medical Benefits
• Health and Lifestyle Programmes

About the Company

Herotel is a telecommunications provider focused on delivering connectivity and digital services across a national footprint.