Information Security & Compliance Lead

Placements24; Soweto; On-site; ZAR 600,000 - 900,000; Full time

Benefits offered by this job

Competitive salary package

Comprehensive medical aid

Retirement benefits

Professional development / training

Employee assistance program

Generous annual leave & time off

Team events

Job summary

Placements24 is seeking an Information Security Compliance Officer in Soweto to ensure adherence to legal, regulatory, and industry standards for information security and privacy. You will develop and implement compliance programs, conduct assessments, and liaise with regulators, while collaborating with IT, legal, and business teams.

The role requires a strong understanding of compliance frameworks (POPIA, GDPR, PCI DSS) and risk management, with 4+ years in GRC or similar.

Qualifications

• Bachelor's degree in Law, IT, Cybersecurity, or related field.
• Certifications such as CIPP, CRISC, or CISSP are highly desirable.
• Experience in information security, GRC, risk and compliance (minimum 4 years).
• Strong knowledge of POPIA, GDPR, CCPA and related regulations.

Responsibilities

• Develop, implement, and maintain information security policies, procedures, and controls to meet compliance requirements.
• Monitor and assess adherence to regulations and standards (POPIA, GDPR, PCI DSS).
• Conduct audits and risk assessments to identify gaps and improvements.
• Develop remediation plans and track implementation.
• Coordinate regulatory inquiries and audits; stay updated on laws and best practices.
• Provide training to employees on information security and data privacy compliance.

Skills

GRC

Risk management

Regulatory compliance

Audit

Policy development

Communication

Education

Bachelor's degree in Law, Information Technology, Cybersecurity, or related field

Tools

ISO 27001

NIST CSF

PCI DSS

Job description

Placements24 is seeking an Information Security Compliance Officer in Soweto to ensure adherence to legal, regulatory, and industry standards for information security and privacy. You will develop and implement compliance programs, conduct assessments, and liaise with regulators, while collaborating with IT, legal, and business teams.

The role requires a strong understanding of compliance frameworks (POPIA, GDPR, PCI DSS) and risk management, with 4+ years in GRC or similar.