Security Compliance Analyst

Placements24; Queenstown; Hybrid; NZD 80,000 - 120,000; Full time

Job summary

Placements24 is seeking a Security Compliance Analyst for a major financial institution in Queenstown on a hybrid basis. You will lead audits, policy development, and regulatory mapping to ISO27001, NIST, and POPIA, ensuring controls align with legal obligations and industry standards.

The role requires 3–5 years in information security with a compliance focus, strong analytical and communication skills, and the ability to work independently in a hybrid environment.

Qualifications

• 3-5 years of information security experience with a focus on compliance and risk management.
• Knowledge of ISO 27001, NIST, POPIA, and other financial sector standards.
• Experience in security audits and gap analyses.
• Excellent written and verbal communication skills, detail oriented.

Responsibilities

• Conduct regular internal and external security compliance audits.
• Develop, implement, and maintain security policies and procedures to meet regulatory requirements.
• Monitor changes in regulations and industry standards, updating compliance strategies accordingly.
• Assess security risks related to compliance and recommend mitigation strategies.
• Liaise with regulatory bodies and external auditors.
• Prepare compliance reports and documentation for management and external agencies.
• Ensure data privacy regulations (e.g., POPIA) are adhered to.
• Provide guidance and training to staff on security compliance matters.

Skills

Analytical skills

Attention to detail

Communication skills

Independent worker

Hybrid work

Education

Bachelor's degree in Information Security

CISA certification

CRISC certification

CISSP certification

Job description

About the Role

Our client, a major financial institution, is seeking a diligent Security Compliance Analyst to ensure adherence to regulatory requirements and industry standards. This role is essential for assessing and improving the organization's security posture concerning compliance mandates. You will be responsible for audits, policy development, and ensuring that all security practices meet legal and regulatory obligations. The position offers a Hybrid work arrangement, allowing for a balance of in-office strategic planning and remote execution. The role is located in Queenstown, Eastern Cape.

Key Responsibilities

• Conduct regular internal and external security compliance audits.
• Develop, implement, and maintain security policies and procedures to meet regulatory requirements.
• Monitor changes in regulations and industry standards, updating compliance strategies accordingly.
• Assess security risks related to compliance and recommend mitigation strategies.
• Liaise with regulatory bodies and external auditors.
• Prepare compliance reports and documentation for management and external agencies.
• Ensure data privacy regulations (e.g., POPIA) are strictly adhered to.
• Provide guidance and training to staff on security compliance matters.

Requirements

• Bachelor's degree in Information Security, Law, Business Administration, or a related field.
• 3-5 years of experience in information security, with a strong focus on compliance and risk management.
• In-depth knowledge of relevant regulations and standards such as ISO 27001, NIST, POPIA, and others applicable to the financial sector.
• Experience in conducting security audits and gap analyses.
• Strong analytical skills and attention to detail.
• Excellent written and verbal communication skills.
• Ability to work independently and manage multiple priorities in a Hybrid environment.
• Relevant certifications like CISA, CRISC, or CISSP are highly desirable.

Benefits

Our client offers a competitive salary, comprehensive medical aid, retirement benefits, and opportunities for professional development. You will be part of a dedicated team focused on maintaining the highest standards of security and compliance in the financial sector. The hybrid model provides flexibility, and the role in Queenstown, Eastern Cape offers a chance to contribute significantly to organizational security governance.