Remote Information Security Governance Specialist

Placements24; Kimberley; Hybrid; CAD 90,000 - 130,000; Full time

Benefits offered by this job

Competitive salary and incentives

Full remote work flexibility

Job summary

Placements24 is seeking an Information Security Governance Specialist to join their remote team. You will establish and maintain a governance framework, develop policies and controls, and ensure compliance with ISO 27001, NIST CSF, POPIA, and GDPR.

This role emphasizes risk management, training, and audits in a remote-first environment. Ideal candidates have a degree in information security or related field and 3-5 years of GRC experience, with strong analytical and communication skills and the

Qualifications

• Bachelor's degree in Information Security, Law, Business Administration, or a related field.
• 3-5 years of experience in information security governance, risk management, and compliance (GRC).
• Strong knowledge of security frameworks (ISO 27001, NIST CSF) and regulations (POPIA, GDPR).
• Experience developing and managing security policies and procedures.
• Excellent analytical, written, and verbal communication skills.
• Ability to work independently and collaboratively in a remote setting.

Responsibilities

• Develop, implement, and maintain information security policies, standards, and procedures.
• Conduct regular reviews of policies and controls to ensure ongoing effectiveness and compliance.
• Manage and coordinate internal and external security audits and assessments.
• Monitor regulatory changes and assess their impact on the organization's security posture.
• Develop and deliver security awareness and training programs.
• Serve as a key point of contact for compliance-related inquiries and initiatives.

Job description

Placements24 is seeking an Information Security Governance Specialist to join their remote team. You will establish and maintain a governance framework, develop policies and controls, and ensure compliance with ISO 27001, NIST CSF, POPIA, and GDPR.

This role emphasizes risk management, training, and audits in a remote-first environment. Ideal candidates have a degree in information security or related field and 3-5 years of GRC experience, with strong analytical and communication skills and the