GRC-Focused Information Security Leader

Placements24; Polokwane; Hybrid; ZAR 900,000 - 1,300,000; Full time

Benefits offered by this job

Competitive salary

Medical aid

Retirement fund

Professional development

Hybrid work

Generous leave

Mentorship

Employee assistance

Job summary

Placements24 in Polokwane, Limpopo is seeking an experienced Information Security Officer focused on Governance, Risk and Compliance (GRC). You will develop and implement security policies, manage risk, and ensure regulatory compliance while promoting a security-aware culture across the organisation.

The role requires a bachelor’s degree in information security or related fields, 4+ years in information security, and relevant certifications (CISM/CRISC/CISSP desirable).

Qualifications

• Bachelor's degree in Information Security, Computer Science, Law, or a related field.
• Minimum of 4 years of experience in information security with governance, risk management and compliance focus.
• In-depth knowledge of GRC frameworks (ISO 27001, NIST CSF, COBIT).
• Familiarity with South African data protection laws (POPIA) and other regulations.
• Experience developing and implementing security policies and procedures.
• Strong analytical and problem-solving skills with attention to detail.
• Excellent written and verbal communication skills; able to explain security concepts to diverse audiences.
• Ability to manage multiple priorities and work in a team or independently.
• Certifications such as CISM, CRISC, CISSP or CGEIT are desirable.
• Experience in logistics or supply chain is a plus.

Responsibilities

• Develop, review, and update information security policies, standards, and guidelines.
• Implement and manage the information security risk management program.
• Ensure compliance with legal, regulatory, and contractual security requirements.
• Oversee information security awareness and training for all employees.
• Manage relationships with external auditors and regulatory bodies.
• Conduct security assessments of new projects and third-party vendors.
• Develop and maintain security metrics and reporting for senior management.
• Advise on information security best practices and risk mitigation strategies.
• Contribute to business continuity and disaster recovery planning.
• Stay informed about evolving threats and regulatory changes.

Skills

GRC knowledge

Regulatory compliance

Security awareness

Communication skills

Education

Bachelor's degree in Information Security or related field

Certifications such as CISM/CRISC/CISSP desirable

Tools

ISO 27001

NIST CSF

COBIT

POPIA compliance

Job description

Placements24 in Polokwane, Limpopo is seeking an experienced Information Security Officer focused on Governance, Risk and Compliance (GRC). You will develop and implement security policies, manage risk, and ensure regulatory compliance while promoting a security-aware culture across the organisation.

The role requires a bachelor’s degree in information security or related fields, 4+ years in information security, and relevant certifications (CISM/CRISC/CISSP desirable).