Information Security Compliance Officer

Placements24; Queenstown; On-site; NZD 90,000 - 130,000; Full time

Benefits offered by this job

Competitive salary

Medical aid

Retirement fund contributions

Professional development opportunities

Generous leave allowances

Job summary

Placements24 client, a well-established healthcare provider, seeks an Information Security Compliance Officer in Queenstown, NZ, to ensure adherence to POPIA and healthcare regulations, and to develop, implement, and maintain robust compliance programs protecting patient data.

You will work with IT, legal, and operations to identify requirements, conduct assessments, coordinate audits, and deliver security training, while ensuring regulatory changes are reflected in policies and controls.

Qualifications

• Bachelor's degree in a relevant field.
• Minimum 4 years of experience in information security compliance or data privacy.
• Knowledge of POPIA and healthcare regulations.
• Experience developing and implementing information security policies.
• Familiarity with IT audit processes and control frameworks (ISO 27001, NIST).
• Relevant professional certifications (CIPP, CIPM, CISA, CRISC) desirable.
• Healthcare sector experience is advantageous.

Responsibilities

• Develop, implement, and maintain information security policies, procedures, and controls to ensure compliance.
• Conduct regular compliance assessments and audits to identify gaps and areas for improvement.
• Monitor changes in legislation and industry standards, updating policies and procedures accordingly.
• Manage and coordinate internal and external audits related to information security and data privacy.
• Develop and deliver security awareness and compliance training programs for employees.
• Investigate and report on compliance breaches or security incidents.
• Liaise with regulatory bodies and external auditors as required.
• Maintain comprehensive documentation of compliance activities and evidence.
• Advise on security and privacy implications of new projects and system changes.
• Collaborate with IT and business units to ensure security controls meet compliance objectives.

Skills

Analytical skills

Problem-solving

Communication skills

Independent work

Education

Bachelor's degree in Information Systems, Law, Business Administration, or related field

Tools

ISO 27001

NIST

Job description

About the Role

Our client, a well-established healthcare provider, is seeking a diligent and knowledgeable Information Security Compliance Officer to ensure adherence to stringent data protection regulations and industry standards. This role is crucial for developing, implementing, and maintaining comprehensive compliance programs that safeguard patient data and sensitive organizational information. You will work closely with IT, legal, and operational teams to identify compliance requirements, conduct assessments, and manage remediation efforts. The ideal candidate possesses a strong understanding of regulatory landscapes, risk management principles, and information security best practices. This position is based in Queenstown, Eastern Cape .

We are looking for a detail-oriented professional committed to upholding the highest standards of data privacy and security within a critical sector. Your expertise will be vital in maintaining trust with patients and stakeholders, and ensuring the organization operates securely and legally.

Key Responsibilities

• Develop, implement, and maintain information security policies, procedures, and controls to ensure compliance with relevant regulations (e.g., POPIA, HIPAA where applicable).
• Conduct regular compliance assessments and audits to identify gaps and areas for improvement.
• Monitor changes in legislation and industry standards, updating policies and procedures accordingly.
• Manage and coordinate internal and external audits related to information security and data privacy.
• Develop and deliver security awareness and compliance training programs for employees.
• Investigate and report on compliance breaches or security incidents.
• Liaise with regulatory bodies and external auditors as required.
• Maintain comprehensive documentation of compliance activities and evidence.
• Advise on security and privacy implications of new projects and system changes.
• Collaborate with IT and business units to ensure security controls meet compliance objectives.

Requirements

• Bachelor's degree in Information Systems, Law, Business Administration, or a related field.
• Minimum of 4 years of experience in information security compliance, risk management, or data privacy.
• In-depth knowledge of data protection regulations such as POPIA and understanding of healthcare-specific regulations.
• Experience with developing and implementing information security policies and procedures.
• Familiarity with IT audit processes and control frameworks (e.g., ISO 27001, NIST).
• Strong analytical and problem-solving skills with excellent attention to detail.
• Excellent written and verbal communication skills, with the ability to explain complex requirements.
• Ability to work independently and manage multiple priorities effectively.
• Professional certifications such as CIPP, CIPM, CISA, or CRISC are highly desirable.
• Experience in the healthcare sector is a significant advantage.

Benefits

• Our client offers a competitive salary package, including a good base salary and potential for annual performance bonuses.
• A comprehensive benefits program includes medical aid, retirement fund contributions, and life insurance.
• Professional development opportunities, such as training, certifications, and workshops related to compliance and security, are provided.
• The company fosters a stable and supportive work environment, prioritizing employee well-being and professional growth.
• Generous annual leave and sick leave allowances contribute to a healthy work-life balance.
• This role provides a critical opportunity to ensure data security and regulatory adherence within the healthcare industry, contributing directly to patient trust and organizational integrity.
• Regular team meetings and cross-departmental collaboration ensure a connected and effective working experience.