Information Security GRC Officer

About the role

You will join the security function protecting one of Africa’s leading payment platforms. Working across governance, risk and compliance, you will translate regulatory frameworks into everyday safeguards that keep the platform and its customers secure.

Key responsibilities

• Shape and maintain the company‑wide security strategy, aligning GRC activities with business goals.
• Assess existing security controls, test their design and implementation, and recommend concrete improvements.
• Map regulatory and framework requirements (ISO 27001, NIST, Secure Controls Framework) to practical policies and standards.
• Own specific parts of the security program, tracking progress and reporting milestones, risks and blockers to leadership.
• Support vendor risk management by evaluating third‑party controls and ensuring they meet security expectations.
• Document and review exceptions to security policies to prevent permanent blind spots.
• Collaborate on security messaging, training and awareness campaigns for employees.

Required profile

• Diploma or equivalent qualification.
• Mandatory experience in information security, governance, risk or compliance.
• Ability to work closely with engineering, product and business teams.
• Strong analytical and communication skills.

Required skills

• Knowledge of ISO 27001.
• Familiarity with NIST security framework.
• Experience with Secure Controls Framework.
• Vendor risk management.
• Security control assessment and testing.