GRC Security Analyst (Junior) – Risk & Compliance in Finance

Network Recruitment; Johannesburg; On-site; ZAR 1,000,000 - 1,600,000; Full time

Job summary

Network Recruitment in Johannesburg seeks a seasoned GRC professional to support governance, risk, and compliance across ICT. You will help maintain ISO/IEC 27001/27002 and NIST CSF mappings, support audits, and drive regulatory compliance efforts.

The role requires extensive experience in regulated environments and collaboration with stakeholders to embed compliant practices across IT, security, and business teams.

Qualifications

• 13 years of experience in GRC, information security, risk or compliance.
• Experience with ISO/IEC 27001/27002, NIST CSF, and related standards.
• Knowledge of POPIA, GDPR, DORA and Joint Standard 2.
• Experience supporting audits and regulatory or assurance activities.

Responsibilities

• Support ICT governance and information security frameworks including policy review and evidence collection for audits.
• Maintain risk registers, track remediation actions and contribute to technology changes and third-party risk.
• Assist with regulatory submissions, DPIAs, incident documentation and regulatory reporting.
• Embed compliance by design and translate regulatory requirements into practical control expectations.
• Collaborate with IT, security, cloud and business teams to ensure compliant operations.

Skills

Attention to detail

Documentation

Communication

Analytical thinking

Risk-based approach

Stakeholder engagement

Integrity

Accountability

Education

Relevant degree in IT/Risk

Tools

ISO/IEC 27001 & 27002

NIST CSF

Job description

Network Recruitment in Johannesburg seeks a seasoned GRC professional to support governance, risk, and compliance across ICT. You will help maintain ISO/IEC 27001/27002 and NIST CSF mappings, support audits, and drive regulatory compliance efforts.

The role requires extensive experience in regulated environments and collaboration with stakeholders to embed compliant practices across IT, security, and business teams.