Hybrid GRC Security Analyst | ISO/NIST | Polokwane

Placements24; Polokwane; Hybrid; ZAR 600,000 - 900,000; Full time

Benefits offered by this job

Medical aid

Retirement fund

Professional development

Hybrid work arrangement

Job summary

Placements24 is seeking an Information Security GRC Analyst to join our client in Polokwane. The role blends on-site engagement with remote flexibility and focuses on developing and maintaining a robust GRC program, risk assessments, and policy management.

The ideal candidate has a Bachelor’s degree in IT/CS/Law, at least 4 years in information security with GRC, knowledge of ISO 27001/NIST/COBIT, and relevant certifications are highly desirable.

Qualifications

• Bachelor's degree in IT/CS/Law or related field.
• At least 4 years information security with a focus on GRC.
• Knowledge of ISO 27001, NIST, COBIT.
• Experience with risk assessments and compliance management.
• Certifications like CISA, CRISC, CISSP or CISM are desirable.

Responsibilities

• Develop and manage the information security GRC program.
• Ensure compliance with regulations and standards (POPIA, GDPR if applicable, ISO 27001).
• Conduct information security risk assessments and maintain a risk register.
• Develop, review and update information security policies, standards, and procedures.
• Coordinate internal and external security audits.
• Respond to regulatory inquiries and assist with compliance reporting.
• Promote security awareness and provide GRC training.
• Monitor regulatory changes and update the GRC program.

Skills

GRC frameworks

Risk management

Security best practices

Communication skills

Report writing

Education

Bachelor's degree in IT/CS/Law or related field

Job description

Placements24 is seeking an Information Security GRC Analyst to join our client in Polokwane. The role blends on-site engagement with remote flexibility and focuses on developing and maintaining a robust GRC program, risk assessments, and policy management.

The ideal candidate has a Bachelor’s degree in IT/CS/Law, at least 4 years in information security with GRC, knowledge of ISO 27001/NIST/COBIT, and relevant certifications are highly desirable.