Information Security Auditor - Kimberley

Placements24; South Africa; On-site; ZAR 1,000,000 - 1,500,000; Full time

Job summary

Placements24 is seeking a Senior Information Security Officer for our Vereeniging, Gauteng facility. You will develop and enforce security policies, manage incidents, and drive compliance with ISO 27001 and NIS 2 to protect critical infrastructure and data.

You will lead threat monitoring, risk assessments, and security program execution across IT and OT environments, while coordinating with vendors and guiding security awareness initiatives.

Qualifications

• Proven experience managing security operations in an industrial/OT environment.
• Strong knowledge of ISO 27001 and NIS 2 compliance requirements.
• Strategic thinker with hands-on cybersecurity leadership capabilities.

Responsibilities

• Develop, implement, and maintain information security strategies and policies.
• Oversee security operations including threat monitoring and incident response.
• Conduct risk assessments, vulnerability analyses, and pen testing.
• Ensure compliance with ISO 27001 and NIS 2 standards.
• Manage security technologies: firewalls, IDS/IPS, SIEM, EPP.
• Lead security awareness training for all staff.
• Collaborate with IT and OT teams for integrated security.
• Serve as contact for security investigations.
• Stay updated on threats and recommend countermeasures.
• Manage relationships with external security vendors and providers.

Skills

Information security strategy

Risk assessment

Incident management

Governance & compliance

Security awareness training

Vendor management

Threat monitoring

Disaster recovery planning

IT/OT security collaboration

Tools

Firewalls

IDS/IPS

SIEM

Endpoint protection

Job description

About the RoleOur client, a leader in the manufacturing and industrial sector, is looking for a highly experienced Senior Information Security Officer to enhance and manage their security operations within their **Vereeniging, Gauteng** facility. This role is pivotal in protecting the company's critical infrastructure, intellectual property, and sensitive data from cyber threats. You will be responsible for developing, implementing, and enforcing security policies and procedures, managing security incidents, and ensuring compliance with industry standards. This position requires a strategic thinker with a strong operational background in cybersecurity. You will lead initiatives to strengthen the organization's security posture, conduct risk assessments, and implement robust security controls. The role offers a challenging and rewarding environment where you can make a tangible impact on the company's security resilience. We are seeking an individual with a proactive mindset and a proven ability to manage complex security challenges within an industrial context. This position is integral to maintaining operational integrity and safeguarding business continuity. Key Responsibilities

• Develop, implement, and maintain comprehensive information security strategies and policies.
• Oversee and manage security operations, including threat monitoring, incident response, and disaster recovery planning.
• Conduct regular risk assessments, vulnerability analyses, and penetration testing to identify and mitigate security weaknesses.
• Ensure compliance with relevant industry regulations and standards (e.g., ISO 27001, NIS 2).
• Manage and maintain security technologies, including firewalls, IDS/IPS, SIEM, and endpoint protection solutions.
• Lead security awareness training programs for all employees.
• Collaborate with IT and operational technology (OT) teams to ensure integrated security across all systems.
• Act as a point of contact for security-related issues and investigations.
• Stay updated on the latest cybersecurity threats, trends, and best practices, and recommend appropriate countermeasures.
• Manage relationships with external security vendors and service providers.

Requirements