Information Security Compliance Specialist

Placements24; Midrand; On-site; ZAR 500,000 - 750,000; Full time

Benefits offered by this job

Competitive salary

Medical aid & retirement fund

Generous annual leave

Professional development & certs

Travel/parking allowance

Employee assistance program

Job summary

WhatJobs Direct is seeking an Information Security Compliance Specialist in Midrand, Gauteng, ZA. You will drive the development and management of compliance programs aligned with POPIA, GDPR, ISO 27001, and related standards.

You will collaborate with IT, legal and business teams to embed controls, perform audits, and address regulatory changes. The role requires 3+ years in security/compliance and relevant certifications.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Law or related field.
• 3+ years of experience in information security, IT audit, or regulatory compliance.
• Knowledge of data privacy regulations (POPIA, GDPR) and information security frameworks (ISO 27001, NIST).
• Experience conducting compliance assessments and gap analyses.
• Strong IT controls and security practices.

Responsibilities

• Develop, implement, and manage information security compliance programs.
• Conduct regular compliance assessments and audits against POPIA, GDPR, ISO 27001, and others.
• Identify compliance risks and remediation strategies.
• Develop and update security policies and guidelines to ensure compliance.
• Liaise with regulatory bodies and external auditors.
• Provide guidance and training on compliance requirements.
• Monitor regulatory changes and update strategies accordingly.
• Manage compliance documentation and reporting.
• Investigate compliance-related inquiries or incidents.
• Collaborate with IT and business teams to embed controls in system designs.

Skills

Analytical thinking

Problem solving

Written & verbal communication

Teamwork

Independent worker

Education

Bachelor's degree in Computer Science or Information Systems or Law

Job description

About the Role

Our client, WhatJobs Direct , is seeking a detail-oriented Information Security Compliance Specialist to join their team in **Midrand, Gauteng, ZA**. This role is critical for ensuring that the organization adheres to all relevant data protection laws, industry regulations, and internal security policies. The Compliance Specialist will be responsible for evaluating existing security controls, identifying compliance gaps, and developing strategies to achieve and maintain regulatory adherence. This position requires a strong understanding of compliance frameworks and a proactive approach to risk management. You will work closely with various departments, including IT, legal, and business operations, to integrate compliance requirements into daily practices. This is an excellent opportunity to contribute to a company's security and governance framework in a challenging and rewarding environment.

Key Responsibilities

• Develop, implement, and manage information security compliance programs.
• Conduct regular compliance assessments and audits against standards such as POPIA, GDPR, ISO 27001, and others.
• Identify compliance risks and vulnerabilities, and recommend remediation strategies.
• Develop and update security policies, procedures, and guidelines to ensure compliance.
• Liaise with regulatory bodies and external auditors.
• Provide guidance and training to employees on compliance requirements.
• Monitor changes in regulations and legislation, and update compliance strategies accordingly.
• Manage compliance documentation and reporting.
• Investigate and respond to compliance-related inquiries or incidents.
• Collaborate with IT and business teams to embed compliance controls into system designs and processes.

Requirements

• Bachelor's degree in Computer Science, Information Systems, Law, or a related field.
• Minimum of 3 years of experience in information security, IT audit, or regulatory compliance.
• In-depth knowledge of data privacy regulations (e.g., POPIA, GDPR) and information security frameworks (e.g., ISO 27001, NIST).
• Experience with conducting compliance assessments and gap analyses.
• Strong understanding of IT controls and security best practices.
• Excellent written and verbal communication skills, with the ability to create clear and concise reports.
• Strong analytical and problem-solving skills.
• Ability to work effectively both independently and as part of a team.
• Relevant certifications such as CIPP, CISA, CRISC, or CISSP are highly desirable.
• Experience in policy development and management.

Benefits

• Competitive salary commensurate with experience.
• Comprehensive medical aid and retirement fund options.
• Generous annual leave.
• Opportunities for professional development and certifications.
• Exposure to diverse compliance challenges.
• Collaborative and professional work environment.
• Performance-based bonuses.
• Clear career advancement opportunities.
• Employee assistance program.
• Parking or transport allowance.