SovTech

Senior Cyber Governance Programme Lead

SovTech

contract

Posted on:

Location Type: Remote

Location: South Africa

Visit company website

Explore more

✨ AI Apply
Apply

Job Level

Senior

Tech Stack

Cyber Security

About the role

  • Lead the cybersecurity and governance remediation programme
  • Align programme with NIST / ISO standards
  • Engage with executive stakeholders and provide board-level reporting
  • Design and implement governance frameworks and policies
  • Oversee risk identification, ranking, and remediation
  • Coordinate with auditors and ensure compliance
  • Formalise business continuity and disaster recovery (BCDR) processes
  • Validate business impact analyses (BIAs)
  • Prepare and deliver executive and board-ready reports

Requirements

  • 8–12+ years in Information Security, Risk, or GRC
  • Bachelor's or Master's degree in Computer Science, Information Security, or a related field.
  • Relevant certifications in NIST, ISO 27001, or related frameworks are advantageous
  • Hands-on implementation of NIST and/or ISO 27000 frameworks
  • Strong experience running remediation or risk programmes
  • Policy drafting and governance framework design capability
  • Experience working with auditors
  • Comfortable operating at the executive / Exco level
  • Ability to consolidate findings, risk-rank issues, and drive structured execution
  • Experience in formalising BCDR and validating BIAs
  • Strong reporting capability (board-ready packs)
  • Exposure to Microsoft 365 security governance (advantageous)
  • Retail or large enterprise experience (beneficial).
Benefits
  • Discovery Medical Aid : Prioritizing your health with the best care.
  • Half-Day Birthday Leave : Celebrate your special day with an afternoon off!
  • Family responsibility & Parental Benefits : Providing full support for a meaningful work-life balance.
Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools
cybersecuritygovernance remediationrisk identificationNISTISO 27001business continuitydisaster recoverybusiness impact analysispolicy draftingrisk programmes
Soft Skills
stakeholder engagementexecutive communicationreporting capabilitystructured executionconsolidation of findings
Certifications
NIST certificationISO 27001 certification