Head of GRC & Information Security — Hybrid

Placements24; South Africa; Hybrid; ZAR 1,800,000 - 3,000,000; Full time

Benefits offered by this job

Executive-level salary

Health benefits

Retirement plan

Paid vacation

Development budget

Hybrid work model

Executive car allowance

Leadership retreats

Job summary

Placements24 in Polokwane, Limpopo seeks an experienced Information Security Manager to lead the GRC function. You will develop and maintain policies, oversee risk assessments, and drive security maturity.

This leadership role requires strategic thinking, strong stakeholder influence, and a track record in ISO 27001, NIST CSF, and COBIT. The hybrid arrangement supports in-office collaboration with remote flexibility.

Qualifications

• Master's degree or equivalent in Information Security, Computer Science, Business Admin or related field.
• Minimum of 8 years of progressive information security experience with at least 5 years in a GRC leadership/management role.
• Proven ability to develop and implement comprehensive GRC programs.

Responsibilities

• Develop, implement and maintain the organization's information security GRC program.
• Oversee creation and enforcement of information security policies, standards and guidelines.
• Lead and manage information security risk assessments and control evaluations.
• Ensure compliance with regulations and industry standards (e.g., POPIA, GDPR, ISMS).
• Manage security incident response processes and create response plans.
• Develop and deliver security awareness training for all employees.
• Oversee audits and remediation with internal and external stakeholders.
• Lead and mentor a team of GRC professionals.

Skills

Governance

Risk management

Compliance

Leadership

Stakeholder management

Strategic thinking

Security awareness

Education

Master's degree in Information Security

Tools

GRC tools

Job description

Placements24 in Polokwane, Limpopo seeks an experienced Information Security Manager to lead the GRC function. You will develop and maintain policies, oversee risk assessments, and drive security maturity.

This leadership role requires strategic thinking, strong stakeholder influence, and a track record in ISO 27001, NIST CSF, and COBIT. The hybrid arrangement supports in-office collaboration with remote flexibility.