GRC Analyst (Junior): Compliance, Risk & Security

Network Recruitment; Johannesburg; On-site; ZAR 700,000 - 900,000; Full time

Job summary

Network Recruitment is seeking a GRC Analyst in Johannesburg to support governance frameworks aligned to ISO/IEC 27001, NIST CSF, GDPR, DORA and Joint Standard 2. You will maintain control mappings, evidence for audits, and lead risk assessments across ICT and information security.

The role involves compliance activities across POPIA, GDPR and supplier due diligence, plus contributing to incident management, resilience testing, and reporting to management forums.

Qualifications

• Practical experience with ISO/IEC 27001 & 27002 and NIST CSF.
• Knowledge of POPIA, GDPR, DORA, and Joint Standard 2.
• 23 years experience in GRC, information security, risk or compliance.
• Exposure to ICT risk, cyber risk, or technology compliance in financial services.

Responsibilities

• Support governance frameworks aligned to ISO/IEC 27001, NIST CSF, GDPR, DORA, and Joint Standard 2.
• Maintain control mappings and evidence to support audits and regulatory reviews.
• Perform ICT and information security risk assessments, updating risk registers and tracking remediation.
• Assist with compliance activities across POPIA, GDPR, DORA, and Joint Standard 2.
• Support third-party and outsourcing risk assessments, due diligence, and supplier compliance.
• Contribute to incident management, resilience testing, and post-incident reviews.
• Provide audit and assurance support, producing risk and compliance reporting for management forums.
• Collaborate with IT, cloud, security, and risk teams to embed compliance by design.

Skills

ISO 27001

NIST CSF

POPIA

GDPR

DORA

Joint Standard 2

GRC experience

risk assessment

Job description

Network Recruitment is seeking a GRC Analyst in Johannesburg to support governance frameworks aligned to ISO/IEC 27001, NIST CSF, GDPR, DORA and Joint Standard 2. You will maintain control mappings, evidence for audits, and lead risk assessments across ICT and information security.

The role involves compliance activities across POPIA, GDPR and supplier due diligence, plus contributing to incident management, resilience testing, and reporting to management forums.