Information Security Consultant - Risk Management and Compliance

Placements24; Sandton; On-site; ZAR 900,000 - 1,300,000; Full time

Benefits offered by this job

Competitive contract rate

Potential for long-term engagement

Job summary

Placements24 in Sandton, Gauteng seeks an experienced Information Security Consultant specializing in risk management and compliance. You will assess security posture, identify risks, and drive mitigation aligned to POPIA, GDPR, ISO 27001 and NIST across the organization.

You will work with senior management on a project basis, leading security policy development, incident analysis, and stakeholder engagement to strengthen security controls and audit readiness.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 7+ years of progressive information security experience with focus on risk management and consulting.
• Strong knowledge of POPIA, GDPR, ISO 27001 and NIST.
• Experience developing and implementing security policies and procedures.

Responsibilities

• Conduct comprehensive information security risk assessments across business units.
• Develop and implement robust risk management frameworks.
• Ensure compliance with POPIA, GDPR and ISO 27001/NIST standards.
• Assist in drafting security policies, procedures and guidelines.
• Advise on security controls and mitigation strategies.
• Support audits and regulatory reviews preparation and response.
• Deliver security awareness training and promote security culture.
• Analyze incidents and contribute to post-incident reviews.
• Evaluate third-party security risks and vendor management.
• Collaborate with stakeholders to embed security into business processes.

Skills

Risk assessment

Regulatory compliance

Policy development

Security governance

Client-facing

Project management

Education

Bachelor’s or Master’s degree in CS/IT/Cybersecurity

Job description

About the Role

Our client is seeking a highly experienced Information Security Consultant specializing in Risk Management and Compliance. This is a critical engagement role, focusing on assessing and enhancing the organization's overall security posture to meet stringent regulatory requirements and industry best practices. You will be instrumental in identifying risks, developing mitigation strategies, and ensuring adherence to standards such as POPIA, GDPR, and ISO 27001. This is a fantastic opportunity for a seasoned security professional to make a significant impact on a project basis, working closely with senior management in Sandton, Gauteng.

Key Responsibilities

• Conduct comprehensive information security risk assessments, identifying vulnerabilities and potential threats across various business units.
• Develop and implement robust risk management frameworks and strategies.
• Ensure compliance with relevant data protection regulations (e.g., POPIA, GDPR) and cybersecurity standards (e.g., ISO 27001, NIST).
• Assist in the development and refinement of information security policies, procedures, and guidelines.
• Provide expert advice on security controls and best practices to mitigate identified risks.
• Support the organization in preparing for and responding to security audits and regulatory reviews.
• Facilitate security awareness training sessions and promote a security-conscious culture.
• Analyze security incidents and contribute to post-incident reviews and lessons learned.
• Evaluate third-party security risks and provide recommendations for vendor management.
• Collaborate with stakeholders across the organization to integrate security considerations into business processes.

Requirements

• Bachelor’s or Master’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Minimum of 7 years of progressive experience in information security, with a strong focus on risk management, compliance, and consulting.
• Demonstrated expertise in conducting risk assessments and implementing mitigation strategies.
• In-depth knowledge of major regulatory frameworks and standards (POPIA, GDPR, ISO 27001, NIST).
• Proven ability to develop and implement security policies and procedures.
• Strong understanding of security technologies and controls.
• Excellent analytical, problem-solving, and critical thinking skills.
• Exceptional written and verbal communication skills, with the ability to present complex information clearly and concisely to executive audiences.
• Experience in client-facing consulting roles is highly desirable.
• Project management skills are a plus.
• Must be able to work on-site in Sandton, Gauteng.

Benefits

• Highly competitive contract rate reflective of extensive experience.
• Potential for long-term engagement based on performance and project needs.
• Opportunity to work on challenging and impactful security initiatives.
• Exposure to diverse business challenges and stakeholders.
• Professional development opportunities may be available.