Cybersecurity & Data Security Associate (Contract Position)
At peopleworth, we support work where people and performance thrive. As part of our Employer Group, we work with a variety of forward-thinking partners and are excited to share this opportunity that sits within our growing group.
Role Overview
This is a fixed-term contract opportunity for a cybersecurity and data security professional with approximately 2 to 3 years of relevant experience who is looking to deepen their exposure to cybersecurity, data protection, risk management, and security governance within a UK-focused context.
Based in the Western Cape and working primarily remotely, the role combines practical security work with advisory, governance, research, and implementation activities. You will contribute independently to defined deliverables while continuing to build practical experience across cybersecurity frameworks, data protection, endpoint monitoring, and risk management.
Key Responsibilities
- Participate in cybersecurity risk assessments and support the documentation of findings, risks, recommendations, and follow-up actions.
- Contribute to the development, review, and maintenance of information security policies, procedures, and supporting compliance documentation.
- Support audit, governance, and risk-management activities relating to cybersecurity, information security, and data protection.
- Monitor and research emerging cybersecurity threats, including phishing, spam, data breaches, vulnerabilities, and other relevant security risks.
- Support the rollout of on-device monitoring software, including coordinating deployment activities, tracking implementation progress, documenting issues, and assisting with follow-up actions.
- Assist with security administration and operational activities within Google-based working environments where required.
- Prepare cybersecurity awareness, guidance, and training materials for internal and wider business audiences.
- Research cybersecurity and data protection frameworks, including ISO 27001, NIST, POPIA, and GDPR, and translate relevant requirements into clear practical guidance.
- Collaborate with colleagues across different functions and time zones to support high-quality cybersecurity, data protection, and risk-management outputs.
- Take ownership of agreed deliverables, maintain accurate documentation, and proactively communicate progress, risks, or areas requiring additional support.
Requirements
- Approximately 2 to 3 years of relevant professional experience in cybersecurity, information security, data protection, risk, IT governance, compliance, or a closely related area.
- Demonstrated foundational knowledge of cybersecurity, data privacy, information security, or technology risk-management concepts.
- Experience working with, supporting, or administering a Google-based business environment is advantageous.
- Exposure to cybersecurity or data-protection frameworks such as ISO 27001, NIST, POPIA, or GDPR.
- Demonstrated interest in advisory, governance, policy, and practical security implementation work.
- Strong research and analytical skills, with the ability to interpret technical or regulatory information and communicate it clearly.
- Good written and verbal communication skills, including the ability to produce clear documentation, guidance, and reports.
- Ability to manage assigned tasks independently while collaborating effectively with colleagues and contributing to shared objectives.
- A bachelor's degree, diploma, or equivalent relevant qualification in Cybersecurity, Information Systems, Data Management, Legal, Risk, Technology, or a related discipline.
- Based in the Western Cape with the ability to travel occasionally to group office locations in areas such as Cape Town, Stellenbosch, Strand, or Paarl while working primarily remotely.
Benefits
- Collaborative, people-centred performance culture.
- Opportunities to grow in a fast-paced environment.
Our Recruitment Process
The peopleworth Employer Group follows a fair, transparent, and multi-stage recruitment process designed to ensure mutual fit.
- Application Submission: Complete the online form and answer brief application questions.
- Initial Screening: Your application is reviewed for role alignment; successful candidates move to the longlist.
- Live Interviews: Shortlisted candidates join first-round interviews (and, where applicable, second or third rounds depending on the role).
- Final Shortlist & Verification: Reference and background checks are completed.
- Offer & Contracting: Successful candidates receive formal offers and contract documents.
- Pre-boarding & Onboarding: Once accepted, you’ll complete a pre-boarding process before officially joining your employing organisation within the Employer Group.
Skills
As published by workable · 10 questions · 5 written answers
Basics
First name, Last name, Email, Headline, Phone, Address, Photo, WhatsApp Number (use country code starting with +), Education, Experience, Summary, Resume, Cover letter, Salary Expectations, expressed in your local currency, indicated per annum., Notice Period / Availability to take on this opportunity if you are successful., How many hours are you available to commit to a new role (keep in mind that this question does not reflect the role's capacity - please see advert for details), This process may require the submission of a short video interview, likely as a first round. This is a critically important part of our standard hiring processes., In which country do you intend to work (where you have working rights)? Note that the employer cannot provide sponsorship to any candidate who does not have working rights via residency or an appropriate visa., What are your work preferences from the list below? (Note that this does not guarantee that the employer will be able to accommodate)
Pick from a list (5)
- Do you have at least 2 years of professional experience in cybersecurity, information security, data protection, IT risk, governance, compliance, or a closely related area? Yes/No
- Have you worked in a Google-based business environment, including Google Workspace or related Google administration or security tools? Yes/No
- Have you worked with one or more of the following frameworks or regulations: ISO 27001, NIST, POPIA, or GDPR? Yes/No
- Have you previously supported the rollout, administration, deployment, or monitoring of software across employee devices or endpoints? Yes/No
- Are you based in the Western Cape and able to travel occasionally to locations such as Cape Town, Stellenbosch, Strand, Paarl, or surrounding areas when required? Yes/No
Written answers (5)
- Briefly describe your most relevant cybersecurity, information security, or data protection experience. Short answer, 3 to 5 sentences
- Briefly describe your experience working with Google-based systems, including any administration, security, access management, or user-support responsibilities. Short answer, 2 to 4 sentences
- Which of the following have you contributed to in a professional environment: cybersecurity risk assessments, information-security policies, audits, governance activities, compliance reviews, or security awareness initiatives? Short answer, candidates can list relevant areas
- Briefly describe how you would approach supporting the rollout of on-device monitoring software across a distributed workforce, including how you would track progress, document issues, and escalate concerns. Short answer, 3 to 5 sentences
- Tell us briefly about a cybersecurity or data-security risk you have identified, investigated, or helped address. What was your role and what action did you take? Short answer, 3 to 5 sentences