GRC Analyst

At peopleworth, we support work where people and performance thrive. As part of our Employer Group, we work with a variety of forward-thinking partners and are excited to share this opportunity that sits within our growing group.

Role Overview

This is a fixed-term contract opportunity for a cybersecurity and data security professional with approximately 2 to 3 years of relevant experience who is looking to deepen their exposure to cybersecurity, data protection, risk management, and security governance within a UK-focused context.

Based in the Western Cape and working primarily remotely, the role combines practical security work with advisory, governance, research, and implementation activities. You will contribute independently to defined deliverables while continuing to build practical experience across cybersecurity frameworks, data protection, endpoint monitoring, and risk management.

Key Responsibilities

Participate in cybersecurity risk assessments and support the documentation of findings, risks, recommendations, and follow-up actions.
Contribute to the development, review, and maintenance of information security policies, procedures, and supporting compliance documentation.
Support audit, governance, and risk-management activities relating to cybersecurity, information security, and data protection.
Monitor and research emerging cybersecurity threats, including phishing, spam, data breaches, vulnerabilities, and other relevant security risks.
Support the rollout of on-device monitoring software, including coordinating deployment activities, tracking implementation progress, documenting issues, and assisting with follow-up actions.
Assist with security administration and operational activities within Google-based working environments where required.
Prepare cybersecurity awareness, guidance, and training materials for internal and wider business audiences.
Research cybersecurity and data protection frameworks, including ISO 27001, NIST, POPIA, and GDPR, and translate relevant requirements into clear practical guidance.
Collaborate with colleagues across different functions and time zones to support high-quality cybersecurity, data protection, and risk-management outputs.
Take ownership of agreed deliverables, maintain accurate documentation, and proactively communicate progress, risks, or areas requiring additional support.

Requirements

Approximately 2 to 3 years of relevant professional experience in cybersecurity, information security, data protection, risk, IT governance, compliance, or a closely related area.
Demonstrated foundational knowledge of cybersecurity, data privacy, information security, or technology risk-management concepts.
Experience working with, supporting, or administering a Google-based business environment is advantageous.
Exposure to cybersecurity or data-protection frameworks such as ISO 27001, NIST, POPIA, or GDPR.
Demonstrated interest in advisory, governance, policy, and practical security implementation work.
Strong research and analytical skills, with the ability to interpret technical or regulatory information and communicate it clearly.
Good written and verbal communication skills, including the ability to produce clear documentation, guidance, and reports.
Ability to manage assigned tasks independently while collaborating effectively with colleagues and contributing to shared objectives.
A bachelor's degree, diploma, or equivalent relevant qualification in Cybersecurity, Information Systems, Data Management, Legal, Risk, Technology, or a related discipline.
Based in the Western Cape with the ability to travel occasionally to group office locations in areas such as Cape Town, Stellenbosch, Strand, or Paarl while working primarily remotely.

Benefits

Collaborative, people-centred performance culture.
Opportunities to grow in a fast-paced environment.

Our Recruitment Process
The peopleworth Employer Group follows a fair, transparent, and multi-stage recruitment process designed to ensure mutual fit.

Application Submission: Complete the online form and answer brief application questions.
Initial Screening: Your application is reviewed for role alignment; successful candidates move to the longlist.
Live Interviews: Shortlisted candidates join first-round interviews (and, where applicable, second or third rounds depending on the role).
Final Shortlist & Verification: Reference and background checks are completed.
Offer & Contracting: Successful candidates receive formal offers and contract documents.
Pre-boarding & Onboarding: Once accepted, you’ll complete a pre-boarding process before officially joining your employing organisation within the Employer Group.

Originally posted on Himalayas

Job Description

Role Overview

Key Responsibilities

Participate in cybersecurity risk assessments and support the documentation of findings, risks, recommendations, and follow-up actions.
Contribute to the development, review, and maintenance of information security policies, procedures, and supporting compliance documentation.
Support audit, governance, and risk-management activities relating to cybersecurity, information security, and data protection.
Monitor and research emerging cybersecurity threats, including phishing, spam, data breaches, vulnerabilities, and other relevant security risks.
Support the rollout of on-device monitoring software, including coordinating deployment activities, tracking implementation progress, documenting issues, and assisting with follow-up actions.
Assist with security administration and operational activities within Google-based working environments where required.
Prepare cybersecurity awareness, guidance, and training materials for internal and wider business audiences.
Research cybersecurity and data protection frameworks, including ISO 27001, NIST, POPIA, and GDPR, and translate relevant requirements into clear practical guidance.
Collaborate with colleagues across different functions and time zones to support high-quality cybersecurity, data protection, and risk-management outputs.
Take ownership of agreed deliverables, maintain accurate documentation, and proactively communicate progress, risks, or areas requiring additional support.

Requirements

Approximately 2 to 3 years of relevant professional experience in cybersecurity, information security, data protection, risk, IT governance, compliance, or a closely related area.
Demonstrated foundational knowledge of cybersecurity, data privacy, information security, or technology risk-management concepts.
Experience working with, supporting, or administering a Google-based business environment is advantageous.
Exposure to cybersecurity or data-protection frameworks such as ISO 27001, NIST, POPIA, or GDPR.
Demonstrated interest in advisory, governance, policy, and practical security implementation work.
Strong research and analytical skills, with the ability to interpret technical or regulatory information and communicate it clearly.
Good written and verbal communication skills, including the ability to produce clear documentation, guidance, and reports.
Ability to manage assigned tasks independently while collaborating effectively with colleagues and contributing to shared objectives.
A bachelor's degree, diploma, or equivalent relevant qualification in Cybersecurity, Information Systems, Data Management, Legal, Risk, Technology, or a related discipline.
Based in the Western Cape with the ability to travel occasionally to group office locations in areas such as Cape Town, Stellenbosch, Strand, or Paarl while working primarily remotely.

Benefits

Collaborative, people-centred performance culture.
Opportunities to grow in a fast-paced environment.

Our Recruitment Process
The peopleworth Employer Group follows a fair, transparent, and multi-stage recruitment process designed to ensure mutual fit.

Application Submission: Complete the online form and answer brief application questions.
Initial Screening: Your application is reviewed for role alignment; successful candidates move to the longlist.
Live Interviews: Shortlisted candidates join first-round interviews (and, where applicable, second or third rounds depending on the role).
Final Shortlist & Verification: Reference and background checks are completed.
Offer & Contracting: Successful candidates receive formal offers and contract documents.
Pre-boarding & Onboarding: Once accepted, you’ll complete a pre-boarding process before officially joining your employing organisation within the Employer Group.

Originally posted on Himalayas

Job Description

Role Overview

Key Responsibilities

Participate in cybersecurity risk assessments and support the documentation of findings, risks, recommendations, and follow-up actions.
Contribute to the development, review, and maintenance of information security policies, procedures, and supporting compliance documentation.
Support audit, governance, and risk-management activities relating to cybersecurity, information security, and data protection.
Monitor and research emerging cybersecurity threats, including phishing, spam, data breaches, vulnerabilities, and other relevant security risks.
Support the rollout of on-device monitoring software, including coordinating deployment activities, tracking implementation progress, documenting issues, and assisting with follow-up actions.
Assist with security administration and operational activities within Google-based working environments where required.
Prepare cybersecurity awareness, guidance, and training materials for internal and wider business audiences.
Research cybersecurity and data protection frameworks, including ISO 27001, NIST, POPIA, and GDPR, and translate relevant requirements into clear practical guidance.
Collaborate with colleagues across different functions and time zones to support high-quality cybersecurity, data protection, and risk-management outputs.
Take ownership of agreed deliverables, maintain accurate documentation, and proactively communicate progress, risks, or areas requiring additional support.

Requirements

Approximately 2 to 3 years of relevant professional experience in cybersecurity, information security, data protection, risk, IT governance, compliance, or a closely related area.
Demonstrated foundational knowledge of cybersecurity, data privacy, information security, or technology risk-management concepts.
Experience working with, supporting, or administering a Google-based business environment is advantageous.
Exposure to cybersecurity or data-protection frameworks such as ISO 27001, NIST, POPIA, or GDPR.
Demonstrated interest in advisory, governance, policy, and practical security implementation work.
Strong research and analytical skills, with the ability to interpret technical or regulatory information and communicate it clearly.
Good written and verbal communication skills, including the ability to produce clear documentation, guidance, and reports.
Ability to manage assigned tasks independently while collaborating effectively with colleagues and contributing to shared objectives.
A bachelor's degree, diploma, or equivalent relevant qualification in Cybersecurity, Information Systems, Data Management, Legal, Risk, Technology, or a related discipline.
Based in the Western Cape with the ability to travel occasionally to group office locations in areas such as Cape Town, Stellenbosch, Strand, or Paarl while working primarily remotely.

Benefits

Collaborative, people-centred performance culture.
Opportunities to grow in a fast-paced environment.

Our Recruitment Process
The peopleworth Employer Group follows a fair, transparent, and multi-stage recruitment process designed to ensure mutual fit.

Application Submission: Complete the online form and answer brief application questions.
Initial Screening: Your application is reviewed for role alignment; successful candidates move to the longlist.
Live Interviews: Shortlisted candidates join first-round interviews (and, where applicable, second or third rounds depending on the role).
Final Shortlist & Verification: Reference and background checks are completed.
Offer & Contracting: Successful candidates receive formal offers and contract documents.
Pre-boarding & Onboarding: Once accepted, you’ll complete a pre-boarding process before officially joining your employing organisation within the Employer Group.

Originally posted on Himalayas

Job Description

Role Overview

Key Responsibilities

Participate in cybersecurity risk assessments and support the documentation of findings, risks, recommendations, and follow-up actions.
Contribute to the development, review, and maintenance of information security policies, procedures, and supporting compliance documentation.
Support audit, governance, and risk-management activities relating to cybersecurity, information security, and data protection.
Monitor and research emerging cybersecurity threats, including phishing, spam, data breaches, vulnerabilities, and other relevant security risks.
Support the rollout of on-device monitoring software, including coordinating deployment activities, tracking implementation progress, documenting issues, and assisting with follow-up actions.
Assist with security administration and operational activities within Google-based working environments where required.
Prepare cybersecurity awareness, guidance, and training materials for internal and wider business audiences.
Research cybersecurity and data protection frameworks, including ISO 27001, NIST, POPIA, and GDPR, and translate relevant requirements into clear practical guidance.
Collaborate with colleagues across different functions and time zones to support high-quality cybersecurity, data protection, and risk-management outputs.
Take ownership of agreed deliverables, maintain accurate documentation, and proactively communicate progress, risks, or areas requiring additional support.

Requirements

Approximately 2 to 3 years of relevant professional experience in cybersecurity, information security, data protection, risk, IT governance, compliance, or a closely related area.
Demonstrated foundational knowledge of cybersecurity, data privacy, information security, or technology risk-management concepts.
Experience working with, supporting, or administering a Google-based business environment is advantageous.
Exposure to cybersecurity or data-protection frameworks such as ISO 27001, NIST, POPIA, or GDPR.
Demonstrated interest in advisory, governance, policy, and practical security implementation work.
Strong research and analytical skills, with the ability to interpret technical or regulatory information and communicate it clearly.
Good written and verbal communication skills, including the ability to produce clear documentation, guidance, and reports.
Ability to manage assigned tasks independently while collaborating effectively with colleagues and contributing to shared objectives.
A bachelor's degree, diploma, or equivalent relevant qualification in Cybersecurity, Information Systems, Data Management, Legal, Risk, Technology, or a related discipline.
Based in the Western Cape with the ability to travel occasionally to group office locations in areas such as Cape Town, Stellenbosch, Strand, or Paarl while working primarily remotely.

Benefits

Collaborative, people-centred performance culture.
Opportunities to grow in a fast-paced environment.

Our Recruitment Process
The peopleworth Employer Group follows a fair, transparent, and multi-stage recruitment process designed to ensure mutual fit.

Application Submission: Complete the online form and answer brief application questions.
Initial Screening: Your application is reviewed for role alignment; successful candidates move to the longlist.
Live Interviews: Shortlisted candidates join first-round interviews (and, where applicable, second or third rounds depending on the role).
Final Shortlist & Verification: Reference and background checks are completed.
Offer & Contracting: Successful candidates receive formal offers and contract documents.
Pre-boarding & Onboarding: Once accepted, you’ll complete a pre-boarding process before officially joining your employing organisation within the Employer Group.

Originally posted on Himalayas