IT Compliance Manager

This is a fully remote position, open to applicants in South Africa.

📋 Description

• Take charge of Sendmarc's internal IT operations for its globally distributed, fully remote team.

• Provide assistance with helpdesk and device support.

• Manage identity and access processes, including onboarding and offboarding provisioning across essential systems.

• Administer tools such as 1Password, Microsoft 365, and Entra.

• Lead the operational program for ISO 27001 certification and the SOC 2 Type II report via Vanta.

• Gather evidence, oversee controls, resolve flagged issues, and collaborate directly with auditors.

• Ensure the Trust Centre remains accurate and up-to-date for Sales and prospective clients.

• Maintain the security risk register.

• Triage and monitor the remediation of penetration test and vulnerability scan findings until resolution.

• Manage the information security policy framework.

• Oversee access reviews and sharing permissions across key systems.

• Assist in third-party/vendor risk evaluations alongside the Finance team.

• Lead the security awareness training and phishing simulation program in collaboration with the Chief People Officer.

⛳️ Requirements

• Must reside in South Africa.

• Hands-on experience in IT administration: device management, identity and access management, and helpdesk/ticketing.

• Proficient in administering SaaS platform security settings.

• Working knowledge of SOC 2 and ISO 27001 frameworks and their evidence requirements.

• Familiarity with compliance automation tools such as Vanta, Drata, Secureframe, or similar platforms.

• Basic understanding of infrastructure and network security principles.

• Previous experience in preparing for a SOC 2 and/or ISO 27001 audit.

• Comfortable managing a risk register and tracking remediation items to completion.

• Ability to translate audit and regulatory requirements into practical internal procedures.

• Experience in drafting or maintaining information security policy documentation.

• Familiarity with the ISO 27001 clause 9 cycle, including internal audits and management reviews.

• Proactive in communication and issue resolution.

• Comfortable serving as the primary point of contact.

• Ownership mentality regarding IT and compliance.

• 3–5+ years of experience in IT management, information security, or compliance-oriented roles.

• Hands-on experience with SOC 2 Type II and/or ISO 27001 audits.

• Experience supporting a distributed, multi-country remote workforce is highly advantageous.

• Background in the cybersecurity industry is a plus but not mandatory.

🏝️ Benefits

• Fully remote work arrangement.

• Permanent employment.