Information Security Compliance Officer

Placements24; Soweto; On-site; ZAR 600,000 - 900,000; Full time

Benefits offered by this job

Competitive salary package

Comprehensive medical aid

Retirement benefits

Professional development / training

Employee assistance program

Generous annual leave & time off

Team events

Job summary

Placements24 is seeking an Information Security Compliance Officer in Soweto to ensure adherence to legal, regulatory, and industry standards for information security and privacy. You will develop and implement compliance programs, conduct assessments, and liaise with regulators, while collaborating with IT, legal, and business teams.

The role requires a strong understanding of compliance frameworks (POPIA, GDPR, PCI DSS) and risk management, with 4+ years in GRC or similar.

Qualifications

• Bachelor's degree in Law, IT, Cybersecurity, or related field.
• Certifications such as CIPP, CRISC, or CISSP are highly desirable.
• Experience in information security, GRC, risk and compliance (minimum 4 years).
• Strong knowledge of POPIA, GDPR, CCPA and related regulations.

Responsibilities

• Develop, implement, and maintain information security policies, procedures, and controls to meet compliance requirements.
• Monitor and assess adherence to regulations and standards (POPIA, GDPR, PCI DSS).
• Conduct audits and risk assessments to identify gaps and improvements.
• Develop remediation plans and track implementation.
• Coordinate regulatory inquiries and audits; stay updated on laws and best practices.
• Provide training to employees on information security and data privacy compliance.

Skills

GRC

Risk management

Regulatory compliance

Audit

Policy development

Communication

Education

Bachelor's degree in Law, Information Technology, Cybersecurity, or related field

Tools

ISO 27001

NIST CSF

PCI DSS

Job description

About the Role

Our client, a rapidly growing e-commerce platform based in Soweto , Gauteng, is seeking a dedicated and knowledgeable Information Security Compliance Officer. This role is crucial for ensuring that the organization adheres to all relevant legal, regulatory, and industry standards pertaining to information security and data privacy. The ideal candidate will possess a strong understanding of compliance frameworks, risk management, and security best practices. You will be responsible for developing and implementing compliance programs, conducting assessments, and liaising with regulatory bodies. This is an excellent opportunity to make a significant impact within a dynamic business environment in Soweto . We are committed to maintaining the highest levels of data protection and regulatory adherence. You will play a key role in building and maintaining our compliance posture, working closely with IT, legal, and business operations teams to embed compliance into daily activities.

Key Responsibilities

• Develop, implement, and maintain information security policies, procedures, and controls to meet compliance requirements.
• Monitor and assess the organization's adherence to relevant regulations (e.g., POPIA, GDPR) and industry standards (e.g., PCI DSS).
• Conduct regular compliance audits and risk assessments to identify potential gaps and areas for improvement.
• Develop remediation plans for identified compliance deficiencies and track their implementation.
• Prepare and coordinate responses for regulatory inquiries and audits.
• Stay up-to-date on changes in relevant laws, regulations, and industry best practices.
• Provide guidance and training to employees on information security and data privacy compliance.
• Collaborate with IT and legal teams to ensure security measures align with compliance objectives.
• Manage and maintain documentation related to compliance efforts.
• Serve as the primary point of contact for compliance-related matters.

Requirements

• Bachelor's degree in Law, Information Technology, Cybersecurity, or a related field; relevant certifications such as CIPP, CRISC, or CISSP are highly desirable.
• A minimum of 4 years of experience in information security, IT governance, risk, and compliance (GRC), or a similar role.
• Solid understanding of key information security and data privacy regulations (e.g., POPIA, GDPR, CCPA).
• Experience with common compliance frameworks and standards (e.g., ISO 27001, NIST CSF, PCI DSS).
• Proficiency in conducting risk assessments and developing compliance strategies.
• Excellent analytical, problem-solving, and organizational skills.
• Strong written and verbal communication skills, with the ability to explain complex requirements clearly.
• Ability to work independently and manage multiple compliance initiatives concurrently.
• Detail-oriented with a strong commitment to accuracy and thoroughness.
• Familiarity with the business landscape in Soweto or surrounding areas is a plus.

Benefits

• Competitive salary package commensurate with experience and qualifications.
• Comprehensive medical aid and retirement benefits.
• Opportunities for professional development and certification training.
• A dynamic and fast-paced work environment.
• The chance to significantly contribute to the compliance framework of a growing company.
• Generous annual leave and paid time off.
• Employee assistance program.
• Performance-based bonuses.
• Collaborative team setting.
• Regular team events and professional networking opportunities.