Information Security Specialist - Risk Assessment

Placements24; Riverton (UT); Hybrid; USD 42,000 - 61,000; Full time

Benefits offered by this job

Hybrid work model

Medical aid

Provident fund

Job summary

Placements24 is seeking an Information Security Specialist focused on risk assessment in Upington, Northern Cape, South Africa. The role combines office collaboration with remote flexibility in a hybrid setup to strengthen the organization’s security posture.

You will conduct risk assessments across systems and processes, document threats, evaluate controls, and contribute to security policy development while engaging with IT and business units.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field.
• Minimum of 3 years in information security with focus on risk assessment and management.
• Familiarity with cybersecurity frameworks (e.g., NIST, ISO 27001).

Responsibilities

• Conduct comprehensive information security risk assessments for systems, applications, and processes.
• Identify, analyze, and document potential security threats and vulnerabilities.
• Evaluate the effectiveness of existing security controls and recommend improvements.
• Develop and maintain risk registers and treatment plans.
• Collaborate with various business units and IT teams to gather information for risk assessments.
• Stay abreast of current security threats, trends, and best practices in risk management.
• Assist in the development and implementation of security policies and procedures.
• Prepare reports and present findings to management and stakeholders.

Skills

Risk assessment

Analytical thinking

Communication

Education

Bachelor's degree in Computer Science/Information Security

Job description

About the Role

Our client, a growing mining and resources company, is seeking an Information Security Specialist focused on Risk Assessment. This role is situated in Upington, Northern Cape, ZA , and offers a hybrid work model, combining office-based collaboration with remote flexibility. You will play a crucial role in identifying, analyzing, and evaluating information security risks across the organization's various systems and processes. Your expertise will be vital in ensuring that appropriate security controls are implemented to mitigate these risks. This is an excellent opportunity for a security professional looking to make a significant impact in a key industry.

Key Responsibilities

• Conduct comprehensive information security risk assessments for systems, applications, and processes.
• Identify, analyze, and document potential security threats and vulnerabilities.
• Evaluate the effectiveness of existing security controls and recommend improvements.
• Develop and maintain risk registers and treatment plans.
• Collaborate with various business units and IT teams to gather information for risk assessments.
• Stay abreast of current security threats, trends, and best practices in risk management.
• Assist in the development and implementation of security policies and procedures.
• Prepare reports and present findings to management and stakeholders.

Requirements

• Bachelor's degree in Computer Science, Information Security, or a related field.
• Minimum of 3 years of experience in information security, with a focus on risk assessment and management.
• Solid understanding of risk assessment methodologies (e.g., qualitative and quantitative).
• Familiarity with cybersecurity frameworks (e.g., NIST, ISO 27001).
• Knowledge of common IT systems, networks, and security controls.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills.
• Ability to work independently and as part of a team.
• Relevant certifications such as Security+ or an introductory risk certification are a plus.

Benefits

• Our client offers a competitive salary, comprehensive medical aid, and a provident fund.
• The hybrid work arrangement in Upington, Northern Cape, ZA provides a good work-life balance.
• Opportunities for professional development, including training and relevant certifications, are available.
• This role offers the chance to contribute to the security resilience of a key industry player and grow within the cybersecurity field.