Information Security Manager - Compliance and Governance

Placements24; Willows (CA); Hybrid; USD 54,000 - 96,000; Full time

Benefits offered by this job

Health Insurance

Retirement fund contributions

Performance incentives

Professional development opportunities

Job summary

Placements24 is seeking an experienced Information Security Manager to lead governance, risk, and compliance initiatives for a well-established financial services group in Welkom. You will develop, implement, and maintain information security policies and procedures to ensure regulatory adherence and industry best practices.

You will manage risk assessments, audits, and security awareness programs while leading a compliance team in a hybrid work environment.

Qualifications

• Bachelor's degree in Information Security, Computer Science, Law, or a related field; Master's degree or relevant certifications (e.g., CISM, CRISC, CISSP) are highly desirable.
• Minimum of 8 years of experience in information security, with at least 5 years in a management or leadership role focusing on governance, risk, and compliance (GRC).
• In-depth knowledge of information security frameworks such as ISO 27001, NIST, COBIT.
• Proven experience in conducting risk assessments, developing security policies, and managing compliance programs.
• Strong understanding of data privacy regulations and requirements.
• Excellent leadership, communication, and interpersonal skills.
• Experience with audit management and vendor risk management.
• Ability to analyze complex security issues and provide practical solutions.
• Experience working within a hybrid work environment.
• Familiarity with the financial services sector is a plus.

Responsibilities

• Develop, implement, and manage the organization's information security policies, standards, and procedures.
• Ensure compliance with relevant regulatory frameworks (e.g., POPIA, GDPR if applicable) and industry standards.
• Oversee information security risk assessments and implement appropriate mitigation strategies.
• Manage and coordinate internal and external security audits.
• Develop and deliver comprehensive security awareness training programs for all employees.
• Lead the incident response planning and execution for security breaches.
• Establish and maintain strong relationships with key stakeholders across the organization.
• Monitor the effectiveness of security controls and recommend improvements.
• Stay informed about emerging threats, vulnerabilities, and regulatory changes impacting information security.
• Manage and mentor the information security compliance team.

Job description

About the Role

Our client, a well-established financial services group in Welkom , Free State, is seeking an experienced Information Security Manager to lead their compliance and governance initiatives. This critical role involves developing, implementing, and maintaining the organization's information security policies, standards, and procedures to ensure adherence to regulatory requirements and industry best practices. You will play a key role in risk management, audit coordination, and security awareness programs. This position offers a dynamic work environment with a hybrid model, allowing for collaboration and flexibility within the Free State province. The ideal candidate will possess strong leadership skills, a deep understanding of cybersecurity frameworks, and a proven ability to manage complex compliance projects.

Key Responsibilities

• Develop, implement, and manage the organization's information security policies, standards, and procedures.
• Ensure compliance with relevant regulatory frameworks (e.g., POPIA, GDPR if applicable) and industry standards.
• Oversee information security risk assessments and implement appropriate mitigation strategies.
• Manage and coordinate internal and external security audits.
• Develop and deliver comprehensive security awareness training programs for all employees.
• Lead the incident response planning and execution for security breaches.
• Establish and maintain strong relationships with key stakeholders across the organization.
• Monitor the effectiveness of security controls and recommend improvements.
• Stay informed about emerging threats, vulnerabilities, and regulatory changes impacting information security.
• Manage and mentor the information security compliance team.

Requirements

• Bachelor's degree in Information Security, Computer Science, Law, or a related field; Master's degree or relevant certifications (e.g., CISM, CRISC, CISSP) are highly desirable.
• Minimum of 8 years of experience in information security, with at least 5 years in a management or leadership role focusing on governance, risk, and compliance (GRC).
• In-depth knowledge of information security frameworks such as ISO 27001, NIST, COBIT.
• Proven experience in conducting risk assessments, developing security policies, and managing compliance programs.
• Strong understanding of data privacy regulations and requirements.
• Excellent leadership, communication, and interpersonal skills.
• Experience with audit management and vendor risk management.
• Ability to analyze complex security issues and provide practical solutions.
• Experience working within a hybrid work environment.
• Familiarity with the financial services sector is a plus.

Benefits

Our client offers a competitive salary package, comprehensive health insurance, retirement fund contributions, performance incentives, and ample opportunities for professional development. You will have the chance to lead critical security initiatives in Welkom and contribute to the overall security maturity of the organization, working within a supportive and professional team.