Information Security Compliance Officer

Placements24; Benoni; Hybrid; ZAR 600,000 - 900,000; Full time

Benefits offered by this job

Competitive salary

Professional development

Medical aid

Retirement funds

Flexible working

Job summary

Placements24 is seeking an Information Security Compliance Officer for our client in Benoni, Gauteng. The role focuses on ensuring adherence to POPIA, GDPR, ISO 27001, and PCI DSS; you will develop and implement compliance programs, conduct audits, and liaise with regulatory bodies.

The ideal candidate has a Law/IT/Cybersecurity degree, 4+ years in security compliance, and strong communication and project management skills to drive security policies across the organization.

Qualifications

• Bachelor's degree in a relevant field.
• Minimum of 4 years of experience in information security compliance, governance, or risk management.
• In-depth knowledge of POPIA and international standards such as GDPR, ISO 27001, NIST.
• Experience in conducting internal and external security audits.
• Familiarity with risk assessment methodologies and control frameworks.
• Strong understanding of IT systems, networks, and security principles.
• Excellent written and verbal communication skills.
• Strong organizational and project management skills.
• Relevant certifications such as CISA, CISM, CRISC, or CompTIA Security+ are desirable.

Responsibilities

• Develop, implement, and maintain the organization's information security compliance program.
• Ensure adherence to relevant data protection laws (e.g., POPIA) and industry standards (e.g., ISO 27001, PCI DSS).
• Conduct regular internal audits and assessments to identify compliance gaps and risks.
• Develop and deliver security awareness training programs focused on compliance obligations.
• Manage external audits and examinations by regulatory bodies and third parties.
• Maintain up-to-date knowledge of evolving cybersecurity regulations and best practices.
• Collaborate with legal, IT, and business units to address compliance requirements.
• Develop and update security policies and procedures to reflect compliance obligations.
• Manage the documentation and evidence collection required for compliance certifications.
• Serve as the primary point of contact for compliance-related inquiries.

Skills

Regulatory compliance

Audit management

POPIA & GDPR knowledge

ISO 27001

Risk assessment

IT security

Communication skills

Project management

CISA/CISM/CRISC/CompTIA Security+

Education

Bachelor's degree in Law, Information Technology, Cybersecurity, or a related field

Job description

About the Role

Our client, a growing entity within the fast-paced technology sector, is seeking an Information Security Compliance Officer to join their team in Benoni, Gauteng . This role is essential for ensuring the organization adheres to all relevant data protection regulations, industry standards, and internal security policies. The Information Security Compliance Officer will be responsible for developing and implementing compliance programs, conducting audits, and managing relationships with regulatory bodies. This position offers an excellent opportunity to contribute to the integrity and trustworthiness of the company's data handling practices. We are looking for a meticulous and knowledgeable individual with a strong understanding of compliance frameworks and legal requirements in South Africa. The ideal candidate will be adept at translating complex regulatory language into practical security controls and processes.

Key Responsibilities

• Develop, implement, and maintain the organization's information security compliance program.


• Ensure adherence to relevant data protection laws (e.g., POPIA) and industry standards (e.g., ISO 27001, PCI DSS).


• Conduct regular internal audits and assessments to identify compliance gaps and risks.


• Develop and deliver security awareness training programs focused on compliance obligations.


• Manage external audits and examinations by regulatory bodies and third parties.


• Maintain up-to-date knowledge of evolving cybersecurity regulations and best practices.


• Collaborate with legal, IT, and business units to address compliance requirements.


• Develop and update security policies and procedures to reflect compliance obligations.


• Manage the documentation and evidence collection required for compliance certifications.


• Serve as the primary point of contact for compliance-related inquiries.

Requirements

• Bachelor's degree in Law, Information Technology, Cybersecurity, or a related field.


• Minimum of 4 years of experience in information security compliance, governance, or risk management.


• In-depth knowledge of South African data protection laws (POPIA) and international standards such as GDPR, ISO 27001, NIST.


• Experience in conducting internal and external security audits.


• Familiarity with risk assessment methodologies and control frameworks.


• Strong understanding of IT systems, networks, and security principles.


• Excellent written and verbal communication skills, with the ability to explain complex compliance requirements.


• Strong organizational and project management skills.


• Ability to work collaboratively across different departments.


• Relevant certifications such as CISA, CISM, CRISC, or CompTIA Security+ are desirable.

Benefits

• Competitive salary and benefits package.


• Opportunity to work in a dynamic and growing industry.


• Professional development opportunities and support for certifications.


• A collaborative work environment with a focus on continuous improvement.


• Contribution to medical aid and retirement funds.


• Potential for flexible working arrangements.