Hybrid Security Compliance Analyst | ISO/NIST & POPIA

Placements24; Queenstown; Hybrid; NZD 80,000 - 120,000; Full time

Job summary

Placements24 is seeking a Security Compliance Analyst for a major financial institution in Queenstown on a hybrid basis. You will lead audits, policy development, and regulatory mapping to ISO27001, NIST, and POPIA, ensuring controls align with legal obligations and industry standards.

The role requires 3–5 years in information security with a compliance focus, strong analytical and communication skills, and the ability to work independently in a hybrid environment.

Qualifications

• 3-5 years of information security experience with a focus on compliance and risk management.
• Knowledge of ISO 27001, NIST, POPIA, and other financial sector standards.
• Experience in security audits and gap analyses.
• Excellent written and verbal communication skills, detail oriented.

Responsibilities

• Conduct regular internal and external security compliance audits.
• Develop, implement, and maintain security policies and procedures to meet regulatory requirements.
• Monitor changes in regulations and industry standards, updating compliance strategies accordingly.
• Assess security risks related to compliance and recommend mitigation strategies.
• Liaise with regulatory bodies and external auditors.
• Prepare compliance reports and documentation for management and external agencies.
• Ensure data privacy regulations (e.g., POPIA) are adhered to.
• Provide guidance and training to staff on security compliance matters.

Skills

Analytical skills

Attention to detail

Communication skills

Independent worker

Hybrid work

Education

Bachelor's degree in Information Security

CISA certification

CRISC certification

CISSP certification

Job description

Placements24 is seeking a Security Compliance Analyst for a major financial institution in Queenstown on a hybrid basis. You will lead audits, policy development, and regulatory mapping to ISO27001, NIST, and POPIA, ensuring controls align with legal obligations and industry standards.

The role requires 3–5 years in information security with a compliance focus, strong analytical and communication skills, and the ability to work independently in a hybrid environment.