GRC Information Security Specialist — Hybrid (Kimberley)

Placements24; Kimberley; Hybrid; CAD 51,000 - 77,000; Full time

Benefits offered by this job

Hybrid work model

Professional development

Medical aid

Pension fund

Competitive salary

Job summary

Placements24 is seeking an Information Security Specialist focusing on GRC to join our client’s corporate services team in a hybrid Kimberley setup. You will develop and maintain security policies, assess risks, and ensure regulatory compliance across the organization.

The role requires 3–5 years of information security experience, strong risk management knowledge (ISO 27001, NIST), and excellent documentation skills. Certifications such as CRISC, CISM, CISA, or CISSP are desirable.

Qualifications

• Bachelor's degree in Information Security, Computer Science, Law, or a related field.
• 3–5 years of information security experience with a strong focus on GRC.
• In-depth knowledge of information security principles, risk management, and compliance frameworks (ISO 27001, NIST).
• Familiarity with data privacy regulations such as POPIA and GDPR.
• Experience in conducting risk assessments and developing security policies.

Responsibilities

• Develop, implement, and maintain information security policies, standards, and procedures.
• Conduct information security risk assessments and identify areas for improvement.
• Ensure compliance with relevant regulations and standards (e.g., POPIA, ISO 27001).
• Manage the GRC framework, including policy management, risk registers, and compliance monitoring.
• Coordinate and support internal and external audits related to information security.
• Develop and deliver security awareness training programs.
• Monitor security control effectiveness and report on compliance status.
• Advise business units on security risks and compliance requirements.
• Assist in developing business continuity and disaster recovery plans from a GRC perspective.
• Stay current with evolving threats, regulations, and best practices in information security and GRC.

Skills

GRC expertise

Information security

Risk assessment

Policy development

Audits

Education

Bachelor's degree in Information Security, Computer Science, Law or related field

Tools

GRC tools

ISO 27001

NIST frameworks

Job description

Placements24 is seeking an Information Security Specialist focusing on GRC to join our client’s corporate services team in a hybrid Kimberley setup. You will develop and maintain security policies, assess risks, and ensure regulatory compliance across the organization.

The role requires 3–5 years of information security experience, strong risk management knowledge (ISO 27001, NIST), and excellent documentation skills. Certifications such as CRISC, CISM, CISA, or CISSP are desirable.