Information Security Officer

{
  "content_hash": "7d8095c47e2758e05e1ac36d3f5fe593301186783acbfba594b692c8d4c55de2",
  "source_hash": "35d3257fbf3d4542a960a0c92f9aa9e99d42364aabb1b089b8cd88f5eeb4be8b",
  "last_changed_at": "2026-05-30T06:07:41.238Z",
  "active_status": "active"
}

{
  "language": "en",
  "location": {
    "raw": "Midrand, Gauteng, 1685, South Africa",
    "city": "Midrand",
    "region": "Gauteng",
    "country": null,
    "is_remote": false,
    "confidence": 0.8
  },
  "salary_max": null,
  "salary_min": null,
  "inferred_at": "2026-06-18T09:41:51.792Z",
  "launch_scope": {
    "reason": "bamboohr_production_catalog",
    "included": true,
    "location": {
      "raw": "Midrand, Gauteng, 1685, South Africa",
      "city": "Midrand",
      "region": "Gauteng",
      "country": null,
      "is_remote": false,
      "confidence": 0.8
    },
    "countries": []
  },
  "remote_policy": null,
  "salary_period": null,
  "workplace_type": null,
  "salary_currency": null
}

{}

{
  "list_job": {
    "id": "53",
    "isRemote": null,
    "location": {
      "city": "Midrand",
      "state": "Gauteng"
    },
    "atsLocation": {
      "city": null,
      "state": null,
      "country": null,
      "province": null
    },
    "departmentId": "18557",
    "locationType": "2",
    "jobOpeningName": "Information Security Officer",
    "departmentLabel": "Engineering",
    "employmentStatusLabel": "Full-Time"
  },
  "detail_errors": [],
  "detail_job_opening": {
    "location": {
      "city": "Midrand",
      "state": "Gauteng",
      "postalCode": "1685",
      "addressCountry": "South Africa"
    },
    "datePosted": "2026-03-10",
    "atsLocation": {
      "city": null,
      "state": null,
      "country": null,
      "countryId": null
    },
    "description": "<p><span style=\"font-weight: bold\">Apply at: <a href=\"https://my.wamly.io/invite/DotsAfrica/75e319c4\" target=\"_blank\" rel=\"noopener noreferrer\">https://my.wamly.io/invite/DotsAfrica/75e319c4</a><br><br>About the Company:</span></p>\n<p>Dots Africa is one of South Africa's leading background screening firms, dedicated to ensuring that businesses hire with confidence. With cutting-edge technology and rigorous processes, we offer our clients unparalleled insights into potential hires. Our mission is to foster trust, security, and transparency in professional relationships, ensuring a safer business environment for all.</p>\n<p><br></p>\n<p><span style=\"font-weight: bold\">Who You'll Be Joining?:</span></p>\n<p>You’ll become an integral member of our expanding Technology team, working alongside other tech professionals. Our team thrives on collaboration, innovation, and mutual respect. We bring enthusiasm to solving problems and pride ourselves on delivering exceptional client experiences in a supportive and dynamic setting.</p>\n<p><br></p>\n<p>This is a hands-on role requiring sound judgment, strong ownership, and the ability to operate calmly across technical, administrative, and user-facing responsibilities.</p>\n<p><br></p>\n<p><span style=\"font-weight: bold\">What Do We Offer?:</span></p>\n<ul>\n<li><span style=\"font-weight: bold\">Competitive Compensation:</span> Market-leading salary, aligned to experience.</li>\n<li><span style=\"font-weight: bold\">Benefits Package:</span> Generous paid time off, and a wellness program to help you strike the right work-life balance.</li>\n<li><span style=\"font-weight: bold\">Growth Opportunities:</span> Commitment to professional development, regular performance reviews, and opportunities to grow within the company.</li>\n<li><span style=\"font-weight: bold\">Dynamic Work Environment:</span> State-of-the-art workspace, regular team-building activities, and an atmosphere that promotes creativity and innovation.</li>\n</ul>\n<p><br></p>\n<p>________________________________________________________________________________________</p>\n<p><br><br></p>\n<p><span style=\"font-weight: bold\">About You (Candidate):</span></p>\n<p>We are looking for an <span><span style=\"font-weight: bold\">Information Security Officer</span></span> to take ownership of our security posture and help shape how security operates across the organisation.</p>\n<p><br></p>\n<p>This role suits someone who enjoys building and improving systems rather than simply maintaining them. You will define security strategy, manage risk and compliance obligations, and work directly with engineering and operations to ensure security controls are practical and effective.</p>\n<p><br></p>\n<p>You will start as an individual contributor but will have the opportunity to <span><span style=\"font-weight: bold\">grow the security function as the company scales</span></span>. You will have <span><span style=\"font-weight: bold\">real ownership of security across the organisation</span></span>, working closely with engineering, IT, and leadership to continuously improve how we protect systems and data.</p>\n<p><br></p>\n<p>This role requires someone who can <span><span style=\"font-weight: bold\">balance governance with practical implementation</span></span>. Policies and frameworks matter, but they must translate into real security improvements across systems and processes. We want someone who is <span><span style=\"font-weight: bold\">curious, proactive, and willing to get involved wherever security touches the business</span></span>.</p>\n<p><br></p>\n<p>You document what you do, follow process, and leave systems better than you found them.</p>\n<p><br></p>\n<p>________________________________________________________________________________________</p>\n<p><br><br></p>\n<p><span style=\"font-weight: bold\">What You'll Be Responsible For:</span><br></p>\n<p><br></p>\n<p><span style=\"font-size: 12pt\"><span style=\"font-weight: bold\">Security Strategy &amp; Leadership</span></span></p>\n<ul>\n<li><span style=\"font-size: 12pt\">Develop and maintain the organisation’s <span style=\"font-weight: bold\">information security strategy and roadmap</span></span></li>\n<li><span style=\"font-size: 12pt\">Identify and prioritise security risks and ensure appropriate mitigation plans exist</span></li>\n<li><span style=\"font-size: 12pt\">Provide security guidance to leadership and influence key technology and business decisions</span></li>\n<li><span style=\"font-size: 12pt\">Establish a culture where security is <span style=\"font-weight: bold\">practical, understood, and embedded into daily work</span></span></li>\n</ul>\n<p><span style=\"font-size: 12pt\"><span style=\"font-weight: bold\">Governance, Risk &amp; Compliance</span></span></p>\n<ul>\n<li><span style=\"font-size: 12pt\">Own the organisation’s <span style=\"font-weight: bold\">security governance framework</span></span></li>\n<li><span style=\"font-size: 12pt\">Develop, review and maintain security policies, standards and procedures</span></li>\n<li><span style=\"font-size: 12pt\">Conduct risk assessments and maintain the <span style=\"font-weight: bold\">security risk register</span></span></li>\n<li><span style=\"font-size: 12pt\">Support compliance with relevant security and data protection frameworks and regulations</span></li>\n<li><span style=\"font-size: 12pt\">Coordinate internal and external security audits when required</span></li>\n<li><span style=\"font-size: 12pt\">Ensure appropriate protection of <span><span style=\"font-weight: bold\">personally identifiable information (PII)</span></span> and other sensitive data processed by the organisation.</span></li>\n</ul>\n<p><span style=\"font-size: 12pt\"><span style=\"font-weight: bold\">Security Architecture &amp; Controls</span></span></p>\n<ul>\n<li><span style=\"font-size: 12pt\">Work with engineering and infrastructure teams to ensure <span style=\"font-weight: bold\">secure design and implementation</span></span></li>\n<li><span style=\"font-size: 12pt\">Evaluate and implement security controls appropriate for our environment</span></li>\n<li><span style=\"font-size: 12pt\">Monitor and improve the organisation’s <span style=\"font-weight: bold\">security posture across systems and processes</span></span></li>\n<li><span style=\"font-size: 12pt\">Assist with threat modelling and security reviews for new systems and features</span></li>\n<li><span style=\"font-size: 12pt\">Own and continuously improve the organisation’s <span><span style=\"font-weight: bold\">SIEM and security monitoring capability</span></span>, including alerting, detection logic, and incident visibility.</span></li>\n<li><span style=\"font-size: 12pt\">Work with engineering teams to embed <span><span style=\"font-weight: bold\">secure development practices</span></span> into the software development lifecycle, including code security, dependency management and security testing.</span></li>\n</ul>\n<p><span style=\"font-size: 12pt\"><span style=\"font-weight: bold\">Incident Management</span></span></p>\n<ul>\n<li><span style=\"font-size: 12pt\">Lead the response to security incidents</span></li>\n<li><span style=\"font-size: 12pt\">Investigate potential security events and coordinate remediation</span></li>\n<li><span style=\"font-size: 12pt\">Improve incident detection and response processes over time</span></li>\n</ul>\n<p><span style=\"font-size: 12pt\"><span style=\"font-weight: bold\">Security Awareness</span></span></p>\n<ul>\n<li><span style=\"font-size: 12pt\">Promote practical security awareness across the company</span></li>\n<li><span style=\"font-size: 12pt\">Help teams understand <span style=\"font-weight: bold\">how security fits into their work</span>, rather than treating it as a separate process</span></li>\n</ul>\n<p><span style=\"font-size: 12pt\"><span style=\"font-weight: bold\">Security Function Development</span></span></p>\n<ul>\n<li><span style=\"font-size: 12pt\">Establish processes and tools needed to operate a mature security function</span></li>\n<li><span style=\"font-size: 12pt\">Contribute to vendor security reviews and third-party risk assessments</span></li>\n<li><span style=\"font-size: 12pt\">As the company grows, <span style=\"font-weight: bold\">help shape and potentially build the security team</span></span></li>\n</ul>\n<p><br></p>\n<p>________________________________________________________________________________________</p>\n<p><br></p>\n<p><span style=\"font-weight: bold\">What Are We Looking For?:</span></p>\n<ul>\n<li style=\"list-style-type: none;\">\n<ul></ul>\n</li>\n</ul>\n<p>We are looking for someone who:<br></p>\n<ul>\n<li><span>Takes initiative and does not wait for problems to be assigned</span></li>\n<li>Enjoys solving problems and learning new things quickly</li>\n<li>V<span>alues </span><span style=\"font-weight: bold\">practical security outcomes over theoretical perfection</span></li>\n<li>Is comfortable working across <span><span style=\"font-weight: bold\">technical and business domains</span></span><br></li>\n<li>Communicates openly, collaborates with teams, and remains engaged in the day-to-day security posture of the organisation.</li>\n<li>Is comfortable working in an environment where security must be <span><span style=\"font-weight: bold\">practical, pragmatic, and integrated into engineering and operations</span></span></li>\n<li>Wants to build something meaningful rather than just maintain a checklist</li>\n</ul>\n<p><br></p>\n<p><span style=\"font-size: 12pt\"><span style=\"font-weight: bold\">Experience &amp; Skills</span></span></p>\n<p><span style=\"font-size: 12pt\">You may already be an Information Security Officer, or a <span style=\"font-weight: bold\">senior security professional ready to step into the role</span>.</span><br></p>\n<p><span style=\"font-size: 12pt\">Experience that will be valuable:</span><br></p>\n<ul>\n<li><span style=\"font-size: 12pt\">Experience implementing or managing security frameworks such as <span style=\"font-weight: bold\">ISO/IEC 27001,</span> <span style=\"font-weight: bold\">SOC 2</span>, or </span><span style=\"font-size: 12pt\"><span style=\"font-weight: bold\">NIST Cybersecurity Framework</span></span></li>\n<li><span style=\"font-size: 12pt\">Experience working in regulated environments handling sensitive personal information will be advantageous.</span></li>\n<li><span style=\"font-size: 12pt\">Security risk management and threat modelling</span></li>\n<li><span style=\"font-size: 12pt\">Incident response and security monitoring</span></li>\n<li><span style=\"font-size: 12pt\">Security policy development and governance</span></li>\n<li><span style=\"font-size: 12pt\">Working closely with engineering or DevOps teams</span><br></li>\n<li><span style=\"font-size: 12pt\"><span>Strong understanding of </span><span style=\"font-weight: bold\">cloud security principles and architectures</span></span></li>\n<li>Hands-on experience with <span style=\"font-size: 12pt\"><span style=\"font-weight: bold\">identity and access management (IAM)</span></span><span style=\"font-size: 12pt\"> and modern identity platforms such as <span style=\"font-weight: bold\">Keycloak</span></span></li>\n<li>Experience securing cloud environments such as <span style=\"font-weight: bold\">Microsoft Azure</span></li>\n<li>Familiarity with identity and device management platforms such as <span style=\"font-weight: bold\">Microsoft Intune</span><span style=\"font-size: 12pt\">, </span><span style=\"font-weight: bold\">Microsoft Purview</span></li>\n</ul>\n<p><br></p>\n<p><span style=\"font-size: 12pt\"><span style=\"font-weight: bold\">Qualifications &amp; Professional Certifications</span></span></p>\n<p><span style=\"font-size: 12pt\">A relevant qualification in Information Security, Cybersecurity, Computer Science, or a related field is beneficial.</span></p>\n<p><span style=\"font-size: 12pt\">Professional security certifications are highly valued for this role. Examples include:</span><br></p>\n<ul>\n<li><span style=\"font-size: 12pt\">CISSP</span></li>\n<li><span style=\"font-size: 12pt\">CISM</span></li>\n<li><span style=\"font-size: 12pt\">ISO 27001 Lead Implementer or ISO 27001 Lead Auditor</span></li>\n<li><span style=\"font-size: 12pt\">CCSP</span></li>\n<li><span style=\"font-size: 12pt\">Azure Security Engineer Associate</span></li>\n</ul>\n<p><span style=\"font-size: 12pt\">Equivalent certifications or demonstrable experience may also be considered.</span></p>\n<p><br></p>\n<p><span style=\"font-size: 12pt\">________________________________________________________________________________________</span></p>\n<p><span style=\"font-size: 12pt\"><br><em>We value people who are curious, practical, and willing to continuously learn. If you enjoy solving problems, improving systems, and making security work in the real world, we would like to hear from you.<br><br></em>Apply here: <a href=\"https://my.wamly.io/invite/DotsAfrica/75e319c4\" target=\"_blank\" rel=\"noopener noreferrer\">https://my.wamly.io/invite/DotsAfrica/75e319c4</a><br></span><br></p>\n<ul></ul>",
    "compensation": null,
    "departmentId": "18557",
    "locationType": "2",
    "seekPromoted": false,
    "jobCategoryId": null,
    "jobOpeningName": "Information Security Officer",
    "departmentLabel": "Engineering",
    "jobOpeningStatus": "Open",
    "minimumExperience": "Experienced",
    "jobOpeningShareUrl": "https://dotsafrica.bamboohr.com/careers/53",
    "employmentStatusLabel": "Full-Time"
  }
}