Information Security Analyst (GRC)

Placements24; Kimberley; Hybrid; CAD 55,000 - 85,000; Full time

Benefits offered by this job

Competitive salary

Health benefits

Hybrid work

Professional development

Team-oriented environment

Job summary

Placements24 seeks a motivated Information Security Analyst with a focus on Governance, Risk and Compliance (GRC) to join our Kimberley team. You will work on risk assessments, policy development, and compliance monitoring to strengthen the organization’s security posture and regulatory adherence.

This hybrid role offers growth within GRC, exposure to ISO 27001 and NIST frameworks, data privacy requirements, audits, and ongoing security awareness activities for staff.

Qualifications

• Bachelor's degree in IT, CS, law or related field.
• 1–3 years in information security, IT audit, compliance or risk.
• Understanding of GRC and ISO 27001/NIST.
• Familiarity with data privacy regulations.
• Strong analytical, research and documentation skills.
• Excellent written and verbal communication.

Responsibilities

• Develop, implement and maintain information security policies and procedures.
• Conduct risk assessments to identify, evaluate and prioritize information security risks.
• Monitor compliance with regulations (e.g., POPIA, GDPR) and standards.
• Assist in audits and audit readiness.
• Track remediation for gaps and improvements.
• Support security awareness and training initiatives.

Skills

GRC concepts

Risk assessment

Regulatory compliance

Policy development

Audit support

Communication skills

Education

Bachelor's degree in IT/CS/Law

Tools

ISO 27001

NIST

Job description

About the Role

Our client is seeking a motivated Information Security Analyst with a focus on Governance, Risk, and Compliance (GRC) to join their team in Kimberley . This role is essential for ensuring the organization adheres to industry standards, regulatory requirements, and internal security policies. You will be involved in risk assessments, policy development, and compliance monitoring activities. This position offers a great opportunity to grow within the GRC domain in a hybrid work environment, contributing to the overall security posture and compliance framework of the company.

Key Responsibilities

• Support the development, implementation, and maintenance of information security policies and procedures.
• Conduct risk assessments to identify, evaluate, and prioritize information security risks.
• Monitor compliance with relevant regulations (e.g., POPIA, GDPR) and industry standards.
• Assist in the preparation for and response to internal and external audits.
• Track and manage remediation efforts for identified compliance and security gaps.
• Contribute to security awareness and training initiatives for employees.

Requirements

• Bachelor's degree in Information Technology, Computer Science, Law, or a related field.
• 1-3 years of experience in information security, IT audit, compliance, or risk management.
• Understanding of GRC principles and frameworks (e.g., ISO 27001, NIST).
• Familiarity with data privacy regulations.
• Strong analytical, research, and documentation skills.
• Excellent written and verbal communication abilities.

Benefits

• Competitive salary and potential for annual bonuses.
• Comprehensive health and wellness benefits package.
• Hybrid work arrangement for enhanced flexibility.
• Opportunities for professional development and GRC certifications.
• A team-oriented environment focused on continuous improvement and regulatory adherence.