{"id":3641573,"url":"https://alion.io/job/datafin-group-information-security-consultant-grc-cpt-onsite","title":"Group Information Security Consultant (GRC) (CPT Onsite)","company":{"id":4497034,"name":"Datafin","domain":null,"url":"https://alion.io/company/datafin","size_band":null,"is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Cape Town, South Africa"],"countries":["ZA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Cortex XDR","optional":false},{"name":"ITIL","optional":false},{"name":"PCI DSS","optional":false},{"name":"SIEM","optional":false},{"name":"Wireshark","optional":false}],"status":"live","first_seen_at":"2026-11-02T07:00:28Z","employer_posted_date":null,"last_verified_at":"2026-11-02T07:00:28Z","board_verified":false,"closed_at":null,"days_open":8,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":8},"description":"ENVIRONMENT:\n\nENSURE that all security-related services are functional to all sites, conduct regular internal compliance checks within the Group of a dynamic Consultancy in Cape Town seeking to fill the role of a Group Information Security Consultant (GRC). You will also ensure the Group achieves and maintains PCI DSS, ISO2700K, ISMS and corporate compliance and support the Group Information Security team. The ideal candidate will require a suitable tertiary qualification or equivalent with relevant working experience of at least 5 years’ experience in a similar role preferable in a global company. You will also need proven experience in working within a process-driven environment and in distributed Patch Management systems, knowledge in security management tools and applications, have a solid understanding of IT & Security Enterprise Architecture. You must be willing to work occasionally out of business hours due to project or incident-related issues.\n\nDUTIES:\n\nAssist the Head of Information Security in maintaining and enforcing the corporate security best practices & strategy across all locations.\nMaintain information security standards and procedures in compliance with agreed corporate Information Security and Risk Management policies, standards and guidelines.\nResponsible for the maintenance and support of security controls and user profiles as required by the functional teams.\nParticipate in the operational security processes (application assessments, product certification, network connectivity to all relevant peers, address group security helpdesk incidents).\nReports on defined IT / Business privacy and security metrics.\nParticipate in Business Continuity and Disaster Recovery planning, providing security, availability, integrity, and confidentiality.\nEnsure that any/all information technology systems and services remain compliant with policy and regulatory requirements.\nEnsure proper firewall Change Management and logging procedure are adhered to.\nEnsure that all security related monitoring, scanning and patching policies are observed and enforced.\nMake recommendations based on reports and observations to take remedial action and/or implement best practice improvements in line with Security Policies.\nProvide ongoing support and recommendations to the Head of Information Security.\nProvide ad-hoc support to local IT teams and Group IT Ops.\nOther duties as determined by the Head of Information Security.\n\nREQUIREMENTS:\n\nTertiary qualification or equivalent with relevant working experience.\nMinimum 5 years’ experience in a similar role preferable in a global company\nProven experience in working within a process-driven environment.\nProven experience in distributed Patch Management systems, knowledge in security management tools and applications.\nWell-developed understanding of IT & Security Enterprise Architecture.\nWilling to work occasionally out of business hours due to project or incident related issues.\n\nAdvantageous –\n\nProven experience in –\nManaging, maintaining and implementing NGFWs; knowledge of Fortinet and Palo Alto.\nEnterprise controlled EDR/XDR applications; knowledge Cortex XDR.\nVulnerability and SIEM products and applications; knowledge of Rapid7 product suites.\nPreferable management in Information Technology or Information Technology Auditing.\nExperience in maintaining and configuring next-generation firewalls.\nWell-developed knowledge Network Analysing tools such as Wireshark.\nDeveloped understanding of the ITIL Service Delivery Model.\nInternal or external IT Auditing experience.\nCISM/CISA or other Certification in IT Security systems.\nCCNA, CCNP or other Certification in Networking area.\nKnowledge of Information Security and PCI DSS Compliance.\nProficiency in German language would be an advantage (written and verbal).\n\nATTRIBUTES:\n\nWell-developed problem-solving skills and ability to work in a fast-paced and changing environment.\nExcellent written and verbal communication skills.\nHighly developed planning and organizational skills.\nFlexible, self-motivated and proactive.\nAn ability to implement processes and procedures as defined by management.\nStrong proficiency in English language (written and verbal).\n\n Desired Skills: \n Group\n Information\n Security","description_format":"text","description_chars":4249,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security"],"lifecycle":[{"event":"open","at":"2026-11-02T21:51:00Z"}],"visa":[],"liveness":{"score":9,"band":"cold","label":"Long shot","p_open":1,"p_active":0.255,"p_room":0.368,"age_days":7,"expected_fill_days":2,"reasons":["seen:7","agency","velocity","win:tail"],"computed_at":"2026-11-10T06:52:35Z"},"pay":null,"html_url":"https://alion.io/job/datafin-group-information-security-consultant-grc-cpt-onsite","json_url":"https://alion.io/job/datafin-group-information-security-consultant-grc-cpt-onsite.json","meta":{"generated_at":"2026-11-10T18:49:52Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9239,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4497034},"rest":"https://alion.io/mcp/rest/get_company?id=4497034"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdatafin-group-information-security-consultant-grc-cpt-onsite"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdatafin-group-information-security-consultant-grc-cpt-onsite"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdatafin-group-information-security-consultant-grc-cpt-onsite"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/datafin-group-information-security-consultant-grc-cpt-onsite\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdatafin-group-information-security-consultant-grc-cpt-onsite"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3641573}},{"tool":"search_jobs","arguments":{"company":4497034,"detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3641573},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}