Information Security Governance Specialist (Remote-First)

Placements24; Kimberley; Hybrid; CAD 77,000 - 111,000; Full time

Benefits offered by this job

Competitive salary

Health benefits

Professional development

Fully remote position

Job summary

Placements24 is seeking an Information Security Governance Specialist to lead the organization’s governance framework from a remote location. The role emphasizes policy development, risk management, and continuous compliance across POPIA, ISO 27001, and NIST CSF, with oversight of audits and vendor risk.

The ideal candidate has 5+ years in GRC, strong analytical skills, and the ability to work independently in a remote setting while aligning security with business objectives.

Qualifications

• 5+ years of experience in information security governance, risk and compliance (GRC).
• Experience developing and implementing security policies and procedures.
• In-depth knowledge of GRC frameworks, risk assessment methodologies, and regulatory requirements (e.g., POPIA, ISO 27001, NIST CSF).
• Experience managing security audit processes and working with external auditors.

Responsibilities

• Develop and implement an information security governance framework, including policies, standards, and guidelines.
• Ensure alignment of security policies with laws, regulations, and industry standards (POPIA, ISO 27001).
• Manage the information security risk management program, including risk identification, assessment, and mitigation.
• Oversee security awareness and training programs for all employees.
• Coordinate internal and external security audits and assessments.
• Develop and maintain security metrics and reporting for management and stakeholders.
• Manage third-party risk assessments to ensure vendor compliance with security requirements.
• Stay current with evolving GRC trends and best practices.
• Facilitate security governance committee meetings and ensure action items are addressed.
• Advise business units on security governance and compliance matters.

Skills

GRC frameworks

Policy development

Audit coordination

Remote collaboration

Education

Bachelors in CS/IS/Law

Job description

About the Role

Our client, a leading fintech company, is actively recruiting for an Information Security Governance Specialist. This is a fully remote position, offering the convenience and flexibility to work from anywhere in South Africa, catering to individuals based in or near Kimberley, Northern Cape, ZA. The Specialist will be responsible for developing, implementing, and maintaining the organization's information security governance framework. This includes establishing policies, standards, and procedures to ensure compliance with regulatory requirements and industry best practices. You will play a crucial role in ensuring our client's robust security posture and maintaining stakeholder trust. The ideal candidate is proactive, detail-oriented, and possesses a strong understanding of security governance and compliance principles within a remote-first operational context.

Key Responsibilities

• Develop and implement an information security governance framework, including policies, standards, and guidelines.
• Ensure alignment of security policies with relevant laws, regulations, and industry standards (e.g., POPIA, ISO 27001).
• Manage the information security risk management program, including risk identification, assessment, and mitigation.
• Oversee security awareness and training programs for all employees.
• Coordinate internal and external security audits and assessments.
• Develop and maintain security metrics and reporting for management and stakeholders.
• Manage third-party risk assessments to ensure vendor compliance with security requirements.
• Stay current with evolving governance, risk, and compliance (GRC) trends and best practices.
• Facilitate security governance committee meetings and ensure action items are addressed.
• Advise business units on security governance and compliance matters.

Requirements

• Bachelor's degree in Computer Science, Information Systems, Law, or a related field.
• A minimum of 5 years of experience in information security governance, risk, and compliance (GRC).
• Proven experience in developing and implementing security policies and procedures.
• In-depth knowledge of GRC frameworks, risk assessment methodologies, and regulatory requirements (e.g., POPIA, ISO 27001, NIST CSF).
• Experience managing security audit processes and working with external auditors.
• Strong analytical, problem-solving, and communication skills.
• Ability to work independently and collaboratively in a remote environment.
• Relevant certifications such as CGEIT, CRISC, CISSP, or CISA are highly desirable.

Benefits

• Our client offers a highly competitive salary, comprehensive health benefits, and performance-based incentives.
• Opportunities for professional development, including specialized training and certifications, are actively encouraged.
• This is a fully remote position, providing maximum flexibility.
• You will be empowered to lead governance initiatives and contribute significantly to the company's security posture, working from your preferred location near Kimberley, Northern Cape, ZA.