Information Security Governance Specialist (Remote)

Placements24; Kimberley; Hybrid; CAD 60,000 - 94,000; Full time

Benefits offered by this job

Remote work

Health benefits

Paid time off

Retirement plan with company match

Professional development budget

Home office stipend

Career growth opportunities

Collaborative virtual team

Access to GRC platforms

Job summary

Placements24 is seeking an Information Security Governance Specialist to establish and maintain security policies, standards, and procedures. This remote role supports a global data analytics leader, ensuring regulatory alignment and effective governance.

You will lead risk assessments, policy development, and training programs while coordinating with legal, compliance, and IT teams to strengthen our security posture across operations tied to the Kimberley region and beyond.

Qualifications

• Bachelor's degree in Information Security, Computer Science, Law, or a related field.
• 4+ years of information security governance, risk management, and compliance (GRC).
• In-depth knowledge of information security frameworks (NIST, ISO 27001) and data privacy regulations (POPIA, GDPR).
• Proven experience in developing and implementing security policies and procedures.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills, with the ability to convey complex concepts clearly.
• Experience with GRC tools is a plus.
• Ability to work independently and manage multiple projects in a remote setting.
• Relevant certifications such as CISA, CRISC, CIPP are highly desirable.
• Strong understanding of IT infrastructure and security controls.

Responsibilities

• Develop, implement, and maintain information security policies, standards, and procedures.
• Ensure alignment of security policies with relevant regulations (e.g., POPIA, GDPR, ISO 27001).
• Conduct regular compliance assessments and gap analyses against established security frameworks.
• Manage the security governance program, including risk management and policy exception processes.
• Develop and deliver security awareness training and communication programs to employees.
• Support internal and external audits by providing documentation and evidence of compliance.
• Monitor changes in the regulatory landscape and update policies and procedures accordingly.
• Collaborate with legal, compliance, and IT teams to ensure a unified approach to security governance.
• Track and report on key governance metrics and program effectiveness.
• Maintain the inventory of security policies and related documentation.

Skills

Governance & Compliance

Policy development

Risk assessment

Regulatory knowledge

Compliance auditing

Independent work

Security awareness

Clear communication

GRC tooling

Policy documentation

Education

Bachelor's degree in Information Security or related field

Tools

GRC tools

Job description

About the Role

Our client, a global leader in data analytics, is seeking a skilled Information Security Governance Specialist to join their expanding cybersecurity division. This role is fully remote, allowing you to work from anywhere in South Africa. The specialist will play a critical role in establishing and maintaining the company's information security policies, standards, and procedures, ensuring alignment with regulatory requirements and industry best practices. You will be instrumental in developing and implementing governance frameworks, conducting compliance assessments, and driving security awareness initiatives. As a remote-first organization, we foster a collaborative environment where you can make a significant impact on our security posture. The ideal candidate is detail-oriented, possesses strong knowledge of governance frameworks, and is adept at translating complex requirements into practical policies. This is a superb opportunity to contribute to a secure digital future, supporting operations that may have ties to the Kimberley, Northern Cape, ZA region, but with complete location independence.

Key Responsibilities

• Develop, implement, and maintain information security policies, standards, and procedures.
• Ensure alignment of security policies with relevant regulations (e.g., POPIA, GDPR, ISO 27001).
• Conduct regular compliance assessments and gap analyses against established security frameworks.
• Manage the security governance program, including risk management and policy exception processes.
• Develop and deliver security awareness training and communication programs to employees.
• Support internal and external audits by providing documentation and evidence of compliance.
• Monitor changes in the regulatory landscape and update policies and procedures accordingly.
• Collaborate with legal, compliance, and IT teams to ensure a unified approach to security governance.
• Track and report on key governance metrics and program effectiveness.
• Maintain the inventory of security policies and related documentation.

Requirements

• Bachelor's degree in Information Security, Computer Science, Law, or a related field.
• 4+ years of experience in information security governance, risk management, and compliance (GRC).
• In-depth knowledge of information security frameworks (NIST, ISO 27001) and data privacy regulations (POPIA, GDPR).
• Proven experience in developing and implementing security policies and procedures.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills, with the ability to convey complex concepts clearly.
• Experience with GRC tools is a plus.
• Ability to work independently and manage multiple projects in a remote setting.
• Relevant certifications such as CISA, CRISC, CIPP are highly desirable.
• Strong understanding of IT infrastructure and security controls.

Benefits

• Competitive salary package.
• Comprehensive health and wellness benefits.
• Generous paid time off and holidays.
• Retirement savings plan with company match.
• Professional development budget for certifications and training.
• Fully remote work environment with flexible hours.
• Home office stipend.
• Opportunities for career growth in a growing field.
• Collaborative and supportive virtual team culture.
• Access to cutting-edge GRC platforms and resources.