Information Security Officer - Policy and Compliance

Placements24; Windsor Park (TN); Remote; USD 90,000 - 130,000; Full time

Benefits offered by this job

Fully remote work

Home office stipend

Health benefits

Retirement options

Generous paid time off

Professional development

Job summary

Placements24 is seeking an Information Security Officer focused on policy and compliance to join a fully remote team. You will develop and maintain security policies, ensure regulatory alignment (POPIA, GDPR, ISO 27001), and lead risk assessments and audits for clients and internal stakeholders.

The role requires 3+ years in information security with strong communication skills and the ability to work independently in a remote setting.

Qualifications

• Bachelor's degree or higher in Information Security, Computer Science, Law, or related field.
• Minimum 3 years of information security experience focusing on policy development, compliance, or risk management.
• Strong knowledge of data privacy regulations (POPIA, GDPR).
• Familiarity with ISO 27001, NIST CSF, SOC 2 frameworks and audit processes.
• Experience with risk assessment methodologies and security controls.

Responsibilities

• Develop, review, and update information security policies, standards, and procedures.
• Ensure compliance with legal, regulatory, and contractual requirements (POPIA, GDPR, ISO 27001).
• Conduct information security risk assessments and develop mitigation plans.
• Manage internal and external security audits and reporting.
• Deliver security awareness training for staff and clients.
• Serve as security contact for internal teams and clients.
• Monitor adherence to security policies and procedures.
• Assist in incident response plan development and execution.
• Stay current with threats, vulnerabilities, and regulatory changes.
• Evaluate security tools and technologies to strengthen compliance posture.
• Maintain comprehensive security documentation and records.

Skills

Policy development

Compliance management

Risk assessment

Data privacy

Audit processes

ISO 27001

NIST CSF

SOC 2

Education

Bachelor's degree in Information Security/CS/Law

Tools

ISO 27001

NIST CSF

SOC 2

Job description

About the Role

Our client, a growing consulting firm specializing in data protection, is seeking an Information Security Officer with a strong focus on Policy and Compliance to join their remote team. This role is vital for developing, implementing, and maintaining comprehensive information security policies, procedures, and guidelines to ensure adherence to regulatory requirements and industry best practices. You will be responsible for conducting risk assessments, managing compliance programs, and providing guidance on security matters to internal stakeholders and clients. The ideal candidate possesses excellent knowledge of data privacy laws (such as POPIA and GDPR), security frameworks, and audit processes. This is a fantastic opportunity for a detail-oriented security professional to make a significant contribution in a flexible, remote work environment. Your expertise will be critical in safeguarding sensitive information and ensuring our client operates within the highest standards of security and compliance. We value a proactive approach to security and a commitment to continuous improvement.

Key Responsibilities

• Develop, review, and update information security policies, standards, and procedures.
• Ensure compliance with relevant legal, regulatory, and contractual requirements (e.g., POPIA, GDPR, ISO 27001).
• Conduct information security risk assessments and develop mitigation plans.
• Manage and coordinate internal and external security audits.
• Develop and deliver security awareness training programs.
• Act as a point of contact for security-related inquiries from internal teams and clients.
• Monitor compliance with security policies and procedures.
• Assist in the development and implementation of security incident response plans.
• Stay current with evolving security threats, vulnerabilities, and regulatory changes.
• Evaluate and recommend security tools and technologies to enhance the compliance posture.
• Maintain security documentation and records.

Requirements

• Bachelor's degree in Information Security, Computer Science, Law, or a related field.
• Minimum of 3 years of experience in information security, with a focus on policy development, compliance, or risk management.
• In-depth understanding of data privacy regulations like POPIA and GDPR.
• Knowledge of information security frameworks such as ISO 27001, NIST CSF, or SOC 2.
• Experience with risk assessment methodologies.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills, with the ability to draft clear and concise policies.
• Ability to work independently and manage multiple priorities in a remote setting.
• Relevant certifications such as CompTIA Security+, CIPP, or CRISC are a plus.
• Experience in a consulting or advisory role is beneficial.

Benefits

• Competitive salary commensurate with experience.
• Comprehensive health benefits package.
• Retirement savings options.
• Generous paid time off.
• Fully remote work arrangement providing maximum flexibility.
• Opportunities for professional development and acquiring new certifications.
• Chance to work with diverse clients and contribute to critical data protection initiatives.
• Supportive and collaborative virtual team environment.
• Home office stipend to create an optimal remote workspace.