Cybersecurity Analyst - GRC Specialist

Placements24; Polokwane; Hybrid; ZAR 420,000 - 620,000; Full time

Job summary

Placements24 is seeking a Cybersecurity Analyst with a GRC focus in Polokwane, Limpopo. The role requires developing and managing the GRC program, including policy development, risk assessments, and audit support. It combines remote flexibility with essential in-office collaboration at the Polokwane site.

The ideal candidate will understand GRC frameworks and have a passion for protecting critical infrastructure in a growing renewable energy sector.

Qualifications

• Experience with GRC frameworks and controls.
• Policy development and risk assessments experience.
• Familiarity with data protection laws such as POPIA.

Responsibilities

• Develop, implement, and maintain the organization's GRC framework and policies.
• Conduct risk assessments and develop mitigation strategies for vulnerabilities.
• Ensure compliance with data protection laws and industry regulations.
• Coordinate internal and external security audits and remediation efforts.
• Deliver security awareness training focused on GRC principles.
• Monitor and report on the effectiveness of the GRC program.
• Manage third-party risk assessments and vendor security reviews.
• Assist in developing and maintaining incident response plans from a GRC perspective.
• Stay updated on regulatory changes and best practices.
• Liaise with legal, compliance, and business units on security matters.

Job description

About the Role

Our client, a prominent player in the renewable energy sector located in Polokwane, Limpopo , requires a dedicated Cybersecurity Analyst with a specialization in Governance, Risk, and Compliance (GRC). This role is essential for ensuring that the company's operations meet stringent security standards and regulatory requirements. You will be responsible for developing, implementing, and managing the GRC program, including policy development, risk assessments, and audit support. This position offers a hybrid work arrangement, blending remote flexibility with essential in-office collaboration at our Polokwane site. The ideal candidate will have a strong understanding of GRC frameworks and a passion for protecting critical infrastructure in a growing industry.

Key Responsibilities

• Develop, implement, and maintain the organization's GRC framework and policies.
• Conduct regular risk assessments and develop mitigation strategies for identified vulnerabilities.
• Ensure compliance with relevant industry regulations and data protection laws (e.g., POPIA, NERC CIP if applicable).
• Manage internal and external security audits, coordinating responses and remediation efforts.
• Develop and deliver security awareness training focused on GRC principles.
• Monitor and report on the effectiveness of the GRC program.
• Manage third-party risk assessments and vendor security reviews.
• Assist in the development and maintenance of incident response plans from a GRC perspective.
• Stay informed about changes in regulatory requirements and industry best practices.
• Liaise with legal, compliance, and business units to ensure alignment on security matters.