Information Security Compliance Officer

Placements24; LegKraal Gate; On-site; ZAR 420,000 - 720,000; Full time

Benefits offered by this job

Medical aid

Retirement fund

Development opportunities

Paid time off

Stable work environment

Job summary

Placements24 in Mahikeng, North West, is seeking an Information Security Compliance Officer to ensure adherence to POPIA, ISO 27001, and NIST; you will build and maintain compliance programs.

You will work with IT, legal, and business units, run audits, develop policies, and train staff to foster a culture of security and regulatory adherence.

Qualifications

• Bachelor's degree in Law, IT, Cybersecurity, or related field.
• 3–5 years in information security compliance, risk management, or IT audit.
• Knowledge of data protection regulations (POPIA) and cybersecurity frameworks (ISO 27001, NIST).
• Experience with conducting compliance assessments and managing audits.
• Strong IT governance and security practices.
• Excellent analytical, documentation, and reporting skills.
• Effective communication and interpersonal skills to engage with stakeholders.
• Certifications such as CIPP/E, CGEIT, or CRISC advantageous.

Responsibilities

• Develop, implement, and manage information security compliance programs.
• Ensure adherence to data protection laws and industry regulations (POPIA).
• Conduct internal audits and assessments to evaluate compliance.
• Manage external audits and provide necessary documentation and evidence.
• Develop and update information security policies, procedures, and guidelines.
• Provide training and awareness programs on security compliance to employees.
• Monitor regulatory changes and update compliance strategies accordingly.
• Collaborate with IT, legal, and business units to address compliance gaps.
• Maintain records of compliance activities and audit results.

Skills

InfoSec compliance

Audit management

Regulatory knowledge

POPIA knowledge

ISO 27001

NIST

Communication skills

Education

Bachelor's degree in Law

Bachelor's degree in Information Technology

Bachelor's degree in Cybersecurity

Job description

About the Role

Our client, a prominent player in the technology sector, is seeking a diligent and knowledgeable Information Security Compliance Officer to join their dedicated team in Mahikeng, North West. This role is crucial for ensuring that the organization adheres to all relevant information security regulations, standards, and internal policies. You will be responsible for developing, implementing, and maintaining compliance programs, conducting regular assessments, and managing audit processes. The ideal candidate will possess a comprehensive understanding of data protection laws (such as POPIA), cybersecurity frameworks (e.g., ISO 27001, NIST), and best practices for information security governance. This is an on-site position, fostering close collaboration with IT, legal, and business units to embed a strong compliance culture. Your expertise will be vital in safeguarding sensitive data and maintaining the company's reputation and operational integrity. We are committed to upholding the highest standards of security and regulatory adherence.

Key Responsibilities

• Develop, implement, and manage information security compliance programs.
• Ensure adherence to relevant data protection laws and industry regulations (e.g., POPIA).
• Conduct regular internal audits and assessments to evaluate compliance status.
• Manage external audits and provide necessary documentation and evidence.
• Develop and update information security policies, procedures, and guidelines.
• Provide training and awareness programs on security compliance to employees.
• Monitor changes in regulatory requirements and update compliance strategies accordingly.
• Collaborate with IT, legal, and business units to address compliance gaps.
• Maintain records of compliance activities and audit results.

Requirements

• Bachelor's degree in Law, Information Technology, Cybersecurity, or a related field.
• 3-5 years of experience in information security compliance, risk management, or IT audit.
• In-depth knowledge of data protection regulations (e.g., POPIA) and cybersecurity frameworks (ISO 27001, NIST).
• Experience with conducting compliance assessments and managing audits.
• Strong understanding of IT governance principles and security best practices.
• Excellent analytical, documentation, and reporting skills.
• Effective communication and interpersonal skills to engage with various stakeholders.
• Relevant certifications such as CIPP/E, CGEIT, or CRISC are advantageous.
• Ability to work collaboratively within an office environment.

Benefits

• Competitive annual salary of R .
• Comprehensive medical aid and retirement fund contributions.
• Opportunities for professional development and certifications in compliance.
• Generous paid time off.
• A stable work environment with a focus on regulatory adherence.