GRC InfoSec Leader: Governance & Risk

Global Edge Group; Gauteng; On-site; ZAR 1,200,000 - 1,800,000; Full time

Job summary

Global Edge Group on behalf of a well-established technology company in the mining industry seeks an experienced GRC Information Security Manager to lead and mature its governance, risk, compliance and information security capability.

This strategic leadership role requires a seasoned professional with a strong background in cybersecurity governance, enterprise risk management, regulatory compliance, audit management, policy development, and stakeholder engagement.

Qualifications

• Bachelor's degree in information security or related field.
• 7+ years in information security, governance, risk and compliance.
• Experience managing information security governance and risk frameworks.
• Strong understanding of enterprise risk management principles.
• Experience leading audits, compliance programmes and regulatory requirements.

Responsibilities

• Develop, implement and maintain Information Security Governance Framework.
• Establish and maintain security policies, standards, procedures and controls.
• Ensure alignment of information security initiatives with business objectives.
• Drive continuous improvement of security posture and maturity.
• Lead enterprise-wide information security risk assessments.
• Manage information security risk register and remediation programmes.
• Identify, evaluate and mitigate cyber and third-party security risks.
• Provide risk-based recommendations to executives and stakeholders.
• Manage supplier and vendor security risk assessments.
• Oversee remediation of audit findings and reporting to senior leadership.
• Develop and lead security awareness programmes and promote a risk-aware culture.

Skills

Governance

Risk management

Audits

Compliance programs

Stakeholder management

Leadership

Communication

Security policies

Security awareness

Vendor risk

Education

Bachelor's degree

Job description

Global Edge Group on behalf of a well-established technology company in the mining industry seeks an experienced GRC Information Security Manager to lead and mature its governance, risk, compliance and information security capability.

This strategic leadership role requires a seasoned professional with a strong background in cybersecurity governance, enterprise risk management, regulatory compliance, audit management, policy development, and stakeholder engagement.