Information Security Governance Specialist

Placements24; Kimberley; Hybrid; CAD 90,000 - 130,000; Full time

Benefits offered by this job

Competitive salary and incentives

Full remote work flexibility

Job summary

Placements24 is seeking an Information Security Governance Specialist to join their remote team. You will establish and maintain a governance framework, develop policies and controls, and ensure compliance with ISO 27001, NIST CSF, POPIA, and GDPR.

This role emphasizes risk management, training, and audits in a remote-first environment. Ideal candidates have a degree in information security or related field and 3-5 years of GRC experience, with strong analytical and communication skills and the

Qualifications

• Bachelor's degree in Information Security, Law, Business Administration, or a related field.
• 3-5 years of experience in information security governance, risk management, and compliance (GRC).
• Strong knowledge of security frameworks (ISO 27001, NIST CSF) and regulations (POPIA, GDPR).
• Experience developing and managing security policies and procedures.
• Excellent analytical, written, and verbal communication skills.
• Ability to work independently and collaboratively in a remote setting.

Responsibilities

• Develop, implement, and maintain information security policies, standards, and procedures.
• Conduct regular reviews of policies and controls to ensure ongoing effectiveness and compliance.
• Manage and coordinate internal and external security audits and assessments.
• Monitor regulatory changes and assess their impact on the organization's security posture.
• Develop and deliver security awareness and training programs.
• Serve as a key point of contact for compliance-related inquiries and initiatives.

Job description

About the Role

Our client is seeking a diligent Information Security Governance Specialist to join their fully remote team. This role is central to establishing and maintaining a strong governance framework that ensures the organization complies with relevant laws, regulations, and industry standards. You will be responsible for developing policies, procedures, and controls that align with best practices in information security. This is an ideal opportunity for a detail-oriented professional to contribute to the strategic direction of security governance in a remote-first environment, helping to build trust and ensure accountability across the organization. Your expertise will guide the company's security posture.

Key Responsibilities

• Develop, implement, and maintain information security policies, standards, and procedures.
• Conduct regular reviews of policies and controls to ensure ongoing effectiveness and compliance.
• Manage and coordinate internal and external security audits and assessments.
• Monitor regulatory changes and assess their impact on the organization's security posture.
• Develop and deliver security awareness and training programs.
• Serve as a key point of contact for compliance-related inquiries and initiatives.

Requirements

• Bachelor's degree in Information Security, Law, Business Administration, or a related field.
• 3-5 years of experience in information security governance, risk management, and compliance (GRC).
• Strong understanding of relevant security frameworks (e.g., ISO 27001, NIST CSF) and regulations (e.g., POPIA, GDPR).
• Experience in developing and managing security policies and procedures.
• Excellent analytical, written, and verbal communication skills.
• Ability to work independently and collaboratively in a remote setting.

Benefits

• Competitive salary and performance-based incentives.
• Full remote work flexibility, enabling a great work-life balance.
• Comprehensive health, dental, and vision insurance.
• Generous annual leave and paid sick days.
• Opportunities for professional growth and certifications in GRC.