Information Security Compliance Manager

Placements24; Durban; Hybrid; ZAR 1,000,000 - 1,600,000; Full time

Benefits offered by this job

Competitive salary

Health & retirement benefits

Hybrid work model

Professional development opportunities

Job summary

Placements24 is seeking an experienced Information Security Compliance Manager for its Durban, KwaZulu-Natal operations. The role focuses on regulatory adherence, policy enforcement, audits, and liaison with regulatory bodies to uphold POPIA, GDPR, ISO 27001, and NIST standards.

You will develop and implement compliance programs, conduct internal assessments, train staff, and stay ahead of evolving data privacy and security regulations in the logistics sector.

Qualifications

• Bachelor's degree in Law, Information Systems, Cybersecurity, or a related field.
• Minimum of 6 years of experience in information security with emphasis on compliance and regulatory affairs.
• In-depth knowledge of POPIA, GDPR, ISO 27001, and NIST.

Responsibilities

• Develop, implement, and manage the organization's information security compliance program.
• Ensure adherence to data protection regulations (POPIA, GDPR) and industry standards (ISO 27001).
• Conduct internal audits and assessments of security controls and processes.
• Liaise with external auditors and regulatory bodies, facilitating audits and inspections.
• Identify compliance gaps and develop remediation plans.
• Create and maintain comprehensive documentation including policies and evidence of compliance.
• Provide training and guidance on security compliance requirements.
• Monitor changes in legislation impacting information security and data privacy.
• Manage the process for reporting security incidents to authorities and stakeholders.
• Stay updated on emerging compliance trends in logistics.

Skills

Regulatory compliance

Audit & risk assessment

GRC

Data protection regulations

Policy development

Training delivery

Regulatory liaison

Communication skills

Education

Bachelor's degree in Law, Information Systems, Cybersecurity, or a related field

Tools

ISO 27001

NIST

Audit tooling

Job description

About the Role

Our client, a prominent player in the logistics sector, is seeking an experienced Information Security Compliance Manager to oversee regulatory adherence and policy enforcement within their operations in Durban, KwaZulu-Natal . This role is crucial for ensuring that all information security practices align with local and international standards, such as POPIA, GDPR, and industry-specific mandates. The Compliance Manager will be responsible for developing and implementing compliance programs, conducting audits, and managing relationships with regulatory bodies. This is an excellent opportunity for a detail-oriented professional to contribute significantly to maintaining our client's integrity and reputation in the competitive Durban market.

Key Responsibilities

• Develop, implement, and manage the organization's information security compliance program.
• Ensure adherence to relevant data protection regulations (e.g., POPIA, GDPR) and industry standards (e.g., ISO 27001).
• Conduct regular internal audits and assessments of security controls and processes.
• Liaise with external auditors and regulatory bodies, facilitating audits and inspections.
• Identify compliance gaps and develop remediation plans to address identified risks.
• Create and maintain comprehensive documentation, including policies, procedures, and evidence of compliance.
• Provide training and guidance to staff on security compliance requirements and best practices.
• Monitor changes in legislation and regulations impacting information security and data privacy.
• Manage the process for reporting security incidents and breaches to relevant authorities and stakeholders.
• Stay updated on emerging compliance trends and threats within the logistics industry.

Requirements

• Bachelor's degree in Law, Information Systems, Cybersecurity, or a related field.
• Minimum of 6 years of experience in information security, with a strong emphasis on compliance and regulatory affairs.
• In-depth knowledge of data protection laws and frameworks such as POPIA, GDPR, ISO 27001, and NIST.
• Proven experience in conducting security audits and risk assessments.
• Excellent understanding of IT governance, risk management, and compliance (GRC) principles.
• Strong analytical and problem-solving abilities with meticulous attention to detail.
• Exceptional written and verbal communication skills, with the ability to present complex information clearly.
• Experience in developing and delivering compliance training programs.
• Professional certifications such as CGEIT, CRISC, or CIPP are highly advantageous.
• Ability to work independently and manage multiple priorities in a fast-paced environment.

Benefits

• Our client offers a competitive salary, comprehensive health benefits including dental and vision coverage, and a retirement savings plan.
• You will have the opportunity to work within a well-established company in Durban, KwaZulu-Natal , contributing to a critical function.
• Professional development opportunities, including access to compliance-focused training and conferences, are provided.
• This role adopts a hybrid work model, balancing office-based collaboration with remote flexibility.