Information Security Specialist - Governance, Risk & Compliance (GRC)

Placements24; Kimberley; Hybrid; CAD 51,000 - 77,000; Full time

Benefits offered by this job

Hybrid work model

Professional development

Medical aid

Pension fund

Competitive salary

Job summary

Placements24 is seeking an Information Security Specialist focusing on GRC to join our client’s corporate services team in a hybrid Kimberley setup. You will develop and maintain security policies, assess risks, and ensure regulatory compliance across the organization.

The role requires 3–5 years of information security experience, strong risk management knowledge (ISO 27001, NIST), and excellent documentation skills. Certifications such as CRISC, CISM, CISA, or CISSP are desirable.

Qualifications

• Bachelor's degree in Information Security, Computer Science, Law, or a related field.
• 3–5 years of information security experience with a strong focus on GRC.
• In-depth knowledge of information security principles, risk management, and compliance frameworks (ISO 27001, NIST).
• Familiarity with data privacy regulations such as POPIA and GDPR.
• Experience in conducting risk assessments and developing security policies.

Responsibilities

• Develop, implement, and maintain information security policies, standards, and procedures.
• Conduct information security risk assessments and identify areas for improvement.
• Ensure compliance with relevant regulations and standards (e.g., POPIA, ISO 27001).
• Manage the GRC framework, including policy management, risk registers, and compliance monitoring.
• Coordinate and support internal and external audits related to information security.
• Develop and deliver security awareness training programs.
• Monitor security control effectiveness and report on compliance status.
• Advise business units on security risks and compliance requirements.
• Assist in developing business continuity and disaster recovery plans from a GRC perspective.
• Stay current with evolving threats, regulations, and best practices in information security and GRC.

Skills

GRC expertise

Information security

Risk assessment

Policy development

Audits

Education

Bachelor's degree in Information Security, Computer Science, Law or related field

Tools

GRC tools

ISO 27001

NIST frameworks

Job description

About the Role

Our client, a reputable corporate services firm, is seeking a dedicated Information Security Specialist with a focus on Governance, Risk, and Compliance (GRC) to join their growing team. This role offers a hybrid working model, combining remote flexibility with essential in-office collaboration in Kimberley . You will be instrumental in developing, implementing, and maintaining the organization's information security policies, standards, and procedures. Your responsibilities will include assessing security risks, ensuring compliance with regulatory requirements, and managing the overall GRC framework. The ideal candidate will possess a strong understanding of information security principles, risk management methodologies, and compliance frameworks. Excellent analytical, communication, and documentation skills are crucial for success in this role. You will work closely with various departments to embed robust security practices and ensure adherence to legal and regulatory obligations, contributing to the overall security posture of the firm in the Northern Cape.

Key Responsibilities

• Develop, implement, and maintain information security policies, standards, and procedures.
• Conduct information security risk assessments and identify areas for improvement.
• Ensure compliance with relevant regulations and standards (e.g., POPIA, ISO 27001).
• Manage the GRC framework, including policy management, risk registers, and compliance monitoring.
• Coordinate and support internal and external audits related to information security.
• Develop and deliver security awareness training programs.
• Monitor security control effectiveness and report on compliance status.
• Advise business units on security risks and compliance requirements.
• Assist in developing business continuity and disaster recovery plans from a GRC perspective.
• Stay current with evolving threats, regulations, and best practices in information security and GRC.

Requirements

• Bachelor's degree in Information Security, Computer Science, Law, or a related field.
• Minimum of 3-5 years of experience in information security, with a strong focus on GRC.
• In-depth knowledge of information security principles, risk management, and compliance frameworks (e.g., ISO 27001, NIST).
• Familiarity with data privacy regulations such as POPIA and GDPR.
• Experience in conducting risk assessments and developing security policies.
• Strong analytical, problem-solving, and critical thinking skills.
• Excellent written and verbal communication skills, with the ability to create clear documentation and reports.
• Ability to work effectively in a hybrid environment in Kimberley .
• Relevant certifications such as CRISC, CISM, CISA, or CISSP are highly desirable.
• Proficiency with GRC tools is a plus.

Benefits

• Competitive salary package with annual performance reviews.
• Comprehensive medical aid and retirement fund contributions.
• Hybrid work model offering a balance of remote and office-based work.
• Opportunities for professional development, training, and certifications.
• A stable and professional work environment in Kimberley .
• Generous annual leave and employee wellness programs.
• Pension fund benefits.
• Exposure to diverse GRC challenges and projects.
• Supportive management and collaborative team culture.
• Clear pathways for career advancement within the GRC domain.