Information Security Compliance Manager

Placements24; Vereeniging; Hybrid; ZAR 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Health insurance

Retirement fund

Professional development

Leadership opportunities

Career growth

Job summary

Placements24 is seeking an experienced Information Security Compliance Manager in Vereeniging, Gauteng. You will lead the development, implementation, and maintenance of information security policies to meet regulatory and industry standards.

You will coordinate internal and external audits, conduct risk assessments, and liaise with legal and business units to ensure compliance across the organization. Strong communication and project management skills are essential.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Law or a related field.
• Minimum of 7 years of experience in information security with a focus on compliance, governance and risk management.
• In-depth knowledge of POPIA, GDPR, ISO 27001 and PCI DSS.
• Proven experience in risk assessments and internal audits.
• Certifications such as CISA, CRISC, CGEIT or CISSP are desirable.

Responsibilities

• Develop, implement and manage the information security compliance program.
• Ensure adherence to laws, regulations and standards (POPIA, GDPR, ISO 27001, PCI DSS).
• Conduct internal audits and risk assessments; coordinate external audits.
• Develop remediation plans and track implementation.
• Maintain documentation of compliance activities, policies and procedures.
• Provide training and awareness programs on security compliance to staff.
• Liaise with legal, internal audit and business units on compliance matters.
• Report status of compliance initiatives to senior management.

Skills

Compliance management

Risk assessment

Audits

Policy development

Project management

Regulatory knowledge

Communication

Education

Bachelor's degree in IT/CS/Law

Job description

About the Role

Our client is seeking an experienced and detail-oriented Information Security Compliance Manager to lead their compliance initiatives in Vereeniging, Gauteng . This critical role will oversee the development, implementation, and maintenance of information security policies and procedures to ensure adherence to relevant regulatory frameworks and industry standards. The ideal candidate will possess a strong understanding of compliance requirements, risk management, and auditing processes. You will work closely with internal teams and external auditors to ensure the organization's security posture meets all legal and contractual obligations. This is an excellent opportunity for a compliance expert to make a significant impact and shape the security governance of a growing organization.

Key Responsibilities

• Develop, implement, and manage the information security compliance program.
• Ensure adherence to relevant laws, regulations, and standards (e.g., POPIA, GDPR, ISO 27001, PCI DSS).
• Conduct regular internal audits and assessments to identify compliance gaps and risks.
• Coordinate and facilitate external audits and assessments conducted by third parties.
• Develop remediation plans for identified compliance issues and track their implementation.
• Maintain comprehensive documentation of compliance activities, policies, and procedures.
• Provide training and awareness programs on security compliance to employees.
• Stay abreast of changes in regulations and industry best practices related to information security compliance.
• Liaise with legal, internal audit, and business units to ensure alignment on compliance matters.
• Report on the status of compliance initiatives to senior management.

Requirements

• Bachelor's degree in Information Technology, Computer Science, Law, or a related field.
• Minimum of 7 years of experience in information security, with a strong focus on compliance, governance, and risk management.
• In-depth knowledge of key regulatory frameworks such as POPIA, GDPR, ISO 27001, and PCI DSS.
• Proven experience in conducting risk assessments and internal audits.
• Strong understanding of security controls and best practices.
• Excellent project management and organizational skills.
• Exceptional written and verbal communication skills, with the ability to present complex information clearly.
• Experience in liaising with regulatory bodies and external auditors.
• Relevant certifications such as CISA, CRISC, CGEIT, or CISSP are highly desirable.

Benefits

• A competitive senior-level salary package.
• Comprehensive health, dental, and vision insurance.
• Generous retirement fund contributions.
• Opportunities for professional development, certifications, and conference attendance.
• A supportive and collaborative work environment.
• Significant influence over the organization's security governance and compliance strategy.
• Potential for career advancement and leadership opportunities.