Information Security Compliance Officer

Placements24; Bloemfontein; On-site; ZAR 420,000 - 720,000; Full time

Benefits offered by this job

Competitive salary

Medical and retirement benefits

Generous annual leave

Professional development opportunities

Stable employment

Bloemfontein location benefit

Job summary

WhatJobs Direct in Bloemfontein, Free State, is seeking an Information Security Compliance Officer to ensure the organization meets POPIA, GDPR, and industry standards. You will develop and manage compliance programs, conduct audits, and advise on secure, compliant operations.

The ideal candidate has a law/IT background, at least four years in information security with a focus on compliance, risk management, or internal audit, and familiarity with ISO 27001 and NIST CSF.

Qualifications

• Bachelor’s degree in Law, Information Security, Computer Science, or related field.
• Minimum 4 years of information security experience focused on compliance, risk, or auditing.
• In-depth knowledge of POPIA and GDPR.
• Familiarity with ISO 27001 and NIST CSF.
• CISA/CRISC/CGEIT/CISSP beneficial.
• Ability to manage multiple initiatives independently.

Responsibilities

• Develop, implement and maintain information security policies and procedures for regulatory compliance.
• Conduct regular internal audits and assessments of security controls.
• Identify compliance gaps and develop remediation plans.
• Liaise with external auditors and regulatory bodies during assessments.
• Stay updated on data protection laws and industry best practices.
• Provide training and guidance on compliance requirements and data security.
• Maintain documentation for policies, procedures, and audit reports.
• Monitor security landscape and advise on compliance adjustments.
• Support risk management by identifying and assessing compliance-related risks.
• Review contracts to ensure security and compliance clauses are adequate.

Skills

Compliance management

Risk assessment

Auditing

Education

Bachelor's degree in Law, Information Security, or Computer Science

Tools

ISO 27001

NIST CSF

Job description

About the Role

Our client, WhatJobs Direct, is seeking a diligent and detail-oriented Information Security Compliance Officer to join their team in Bloemfontein, Free State. This role is crucial for ensuring that the organization adheres to all relevant legal, regulatory, and industry standards related to data protection and cybersecurity. You will be responsible for developing, implementing, and managing compliance programs, conducting audits, and advising on best practices to maintain a secure and compliant environment. The ideal candidate will have a strong understanding of compliance frameworks, risk management, and data privacy regulations. This position offers a stable career path within a growing organization, contributing to its ethical and secure operations in Bloemfontein.

Key Responsibilities

• Develop, implement, and maintain information security policies and procedures to ensure compliance with relevant regulations (e.g., POPIA, GDPR, industry-specific standards).
• Conduct regular internal audits and assessments to evaluate the effectiveness of security controls and compliance adherence.
• Identify compliance gaps and develop remediation plans to address them.
• Liaise with external auditors and regulatory bodies during compliance assessments.
• Stay up-to-date with changes in data protection laws, cybersecurity regulations, and industry best practices.
• Provide training and guidance to employees on compliance requirements and data security awareness.
• Manage and maintain documentation related to compliance efforts, including policies, procedures, and audit reports.
• Monitor the security landscape for emerging threats and advise on necessary compliance adjustments.
• Support risk management activities by identifying and assessing compliance-related risks.
• Assist in the development and review of contracts and third-party agreements to ensure security and compliance clauses are adequate.

Requirements

• Bachelor's degree in Law, Information Security, Computer Science, or a related field.
• Minimum of 4 years of experience in information security, with a strong focus on compliance, risk management, or internal audit.
• In-depth knowledge of South African data protection laws such as POPIA, as well as international regulations like GDPR.
• Familiarity with common security frameworks (e.g., ISO 27001, NIST CSF).
• Experience in conducting audits and assessments.
• Strong understanding of IT controls, risk assessment methodologies, and security best practices.
• Excellent analytical, problem-solving, and organizational skills.
• Effective written and verbal communication skills for reporting and training.
• Professional certifications such as CISA, CRISC, CGEIT, or CISSP are highly advantageous.
• Ability to work independently and manage multiple compliance initiatives.

Benefits

• Competitive salary package.
• Comprehensive medical and retirement benefits.
• Generous annual leave and company holidays.
• Opportunities for professional development and certifications.
• A key role in ensuring the organization's regulatory adherence and security.
• Stable employment in a growing industry.
• The opportunity to contribute to the security landscape of Bloemfontein.