Information Security Governance Officer

Placements24; Kimberley; Hybrid; CAD 90,000 - 125,000; Full time

Benefits offered by this job

Flexible hybrid work arrangements

Job summary

Placements24 is assisting with the recruitment of an Information Security Governance Officer for Kimberley. The role focuses on establishing governance structures aligned with regulatory and internal policies, and enforcing security standards.

You will lead policy development, risk assessments, and audit coordination while driving security awareness across the organization in a hybrid work setup.

Qualifications

• Bachelor's degree is required.
• 4+ years of information security governance, risk, and compliance experience.
• Knowledge of ISO 27001 and NIST frameworks.
• Experience in policy development and audit coordination.
• Certifications such as CGEIT, CRISC, or CISSP are desirable.

Responsibilities

• Develop, implement, and maintain information security policies, standards, and procedures.
• Oversee compliance with regulations and industry best practices.
• Manage information security risk assessment processes and remediation tracking.
• Coordinate internal and external security audits and close findings timely.
• Develop and deliver security awareness training for employees.
• Monitor security controls and report on posture.

Skills

GRC governance

Policy development

Risk assessment

Audits coordination

Stakeholder communication

ISO 27001 / NIST

Education

Bachelor's degree in Information Systems, Law, or related field

Job description

About the Role

Our client is looking for a diligent Information Security Governance Officer to establish and maintain robust security governance structures in Kimberley. This role is essential for ensuring that the organization's information security practices align with legal, regulatory, and internal policy requirements. You will be responsible for developing, implementing, and enforcing security policies, procedures, and standards, as well as managing compliance initiatives. This is an ideal position for a professional with a strong understanding of governance, risk, and compliance (GRC) principles to drive security excellence.

Key Responsibilities

• Develop, implement, and maintain information security policies, standards, and procedures.
• Oversee compliance with relevant regulations (e.g., POPIA) and industry best practices.
• Manage the information security risk assessment process and track remediation efforts.
• Coordinate internal and external security audits, ensuring timely closure of findings.
• Develop and deliver information security awareness training programs to employees.
• Monitor the effectiveness of security controls and report on the organization's security posture.

Requirements

• Bachelor's degree in Information Systems, Law, or a related field.
• Minimum of 4 years of experience in information security governance, risk, and compliance (GRC).
• Strong knowledge of information security frameworks (ISO 27001, NIST) and data protection regulations.
• Experience in policy development, risk assessment methodologies, and audit coordination.
• Excellent analytical, organizational, and communication skills.
• Relevant certifications such as CGEIT, CRISC, or CISSP are highly desirable.

Benefits

• Competitive salary and benefits package.
• Opportunities for professional growth and development in GRC.
• Flexible hybrid work arrangements.
• Contribution to shaping security governance within the organization.
• A collaborative environment in Kimberley focused on compliance and security.