GRC & Compliance InfoSec Specialist (Hybrid)

Placements24; Vereeniging; Hybrid; ZAR 700.000 - 900.000; Vollzeit

Benefits dieser Stelle

Hybrid work model

Professional development opportunities

Competitive salary package

Zusammenfassung

Placements24 seeks an Information Security Specialist focused on Governance, Risk and Compliance (GRC) to join our client in Vereeniging, Gauteng. This hybrid role supports integrating security and compliance into daily operations and shaping the organisation's GRC strategy.

The role requires 4+ years in Information Security with strong GRC experience and knowledge of POPIA and ISO 27001. Certifications such as CGEIT/CRISC/CISA are highly desirable.

Qualifikationen

• Bachelor’s degree in IT, CS, Law or related field.
• Minimum 4 years in Information Security with a strong GRC focus.
• Experience implementing and managing GRC frameworks and processes.
• Knowledge of governance, risk management and compliance principles.
• Certifications such as CGEIT, CRISC or CISA are desirable.

Aufgaben

• Develop, implement, and maintain GRC policies, standards, and procedures.
• Perform information security risk assessments and remediation planning.
• Oversee compliance with POPIA, GDPR, ISO 27001 and related standards.
• Manage internal and external audits and liaise with auditors.
• Deliver security awareness training programs.
• Monitor KPIs to measure control effectiveness.
• Advise departments on security and compliance requirements.
• Support incident management from a compliance perspective.

Kenntnisse

Analytical skills

Report writing

Communication skills

Ausbildung

Bachelor's degree in Information Technology / Computer Science / Law

Jobbeschreibung

Placements24 seeks an Information Security Specialist focused on Governance, Risk and Compliance (GRC) to join our client in Vereeniging, Gauteng. This hybrid role supports integrating security and compliance into daily operations and shaping the organisation's GRC strategy.

The role requires 4+ years in Information Security with strong GRC experience and knowledge of POPIA and ISO 27001. Certifications such as CGEIT/CRISC/CISA are highly desirable.