Information Security Consultant - Risk Management & Compliance

Placements24; Rustenburg; Hybrid; ZAR 923,000 - 1,476,000; Full time

Benefits offered by this job

Hybrid work arrangement

Contract role with flexible schedule

Job summary

Placements24 in Rustenburg, North West, seeks a seasoned Information Security Consultant to lead risk management and compliance initiatives. The role is contract-based with a hybrid work arrangement, enabling a blend of on-site presence and remote flexibility.

The consultant will assess the organization's security posture, embed a risk-aware culture, and implement governance aligned with ISO 27001, POPIA, and related standards. Strong communication and PM skills are essential.

Qualifications

• Master's degree or equivalent in Information Security, IT Management, or related discipline.
• 7+ years of experience as an Information Security Consultant or similar role with focus on risk management and compliance.
• In-depth knowledge of ISO 27001, NIST CSF, SOC 2, and GDPR/POPIA.
• Experience conducting security audits, risk assessments and gap analyses.
• Familiarity with enterprise risk management (ERM) principles.
• Excellent report writing and presentation skills for non-technical audiences.
• Strong project management and stakeholder management capabilities.
• Certifications such as CISM, CRISC, or CISSP are desirable.
• Ability to work independently within a hybrid model near Rustenburg.

Responsibilities

• Conduct comprehensive information security risk assessments and develop risk mitigation plans.
• Ensure compliance with data protection regulations (POPIA) and industry standards (ISO 27001, NIST).
• Develop and maintain security policies, procedures, and guidelines.
• Assist in preparing for and responding to internal and external security audits.
• Advise on security best practices and emerging compliance requirements.
• Facilitate security awareness training programs for employees.
• Evaluate third-party vendor security risks and contractual obligations.
• Contribute to business continuity and disaster recovery plans.
• Provide expert consultation on security architecture and control implementation.

Skills

Risk management

Compliance

Stakeholder management

Report writing

Project management

Security governance

Education

Master's degree in Information Security / IT Management or related field

Job description

About the Role

Our client requires a seasoned Information Security Consultant to focus on risk management and compliance frameworks. This is a contract position based in Rustenburg, North West , with a hybrid work arrangement, allowing for a blend of on-site presence and remote flexibility. The consultant will be responsible for assessing the organization's security posture, identifying risks, and ensuring adherence to relevant industry standards and regulations (e.g., ISO 27001, POPIA). This role is ideal for an experienced professional seeking to apply their expertise in a project-based capacity, contributing to the enhancement of our client's security governance. You will engage with stakeholders across various departments to embed a strong risk-aware culture and implement robust compliance strategies. The successful candidate will play a key role in shaping and implementing security governance initiatives.

Key Responsibilities

• Conduct comprehensive information security risk assessments and develop risk mitigation plans.
• Ensure compliance with relevant data protection regulations (e.g., POPIA) and industry standards (e.g., ISO 27001, NIST).
• Develop and maintain security policies, procedures, and guidelines.
• Assist in preparing for and responding to internal and external security audits.
• Advise on security best practices and emerging compliance requirements.
• Facilitate security awareness training programs for employees.
• Evaluate third-party vendor security risks and contractual obligations.
• Contribute to the development and implementation of business continuity and disaster recovery plans.
• Provide expert consultation on security architecture and control implementation.

Requirements

• Master's degree or equivalent experience in Information Security, IT Management, or a related discipline.
• Proven experience (7+ years) as an Information Security Consultant or in a similar role, with a strong focus on risk management and compliance.
• In-depth knowledge of international security standards and frameworks such as ISO 27001, NIST CSF, SOC 2, and GDPR/POPIA.
• Experience conducting security audits, risk assessments, and gap analyses.
• Familiarity with enterprise risk management (ERM) principles.
• Excellent report writing and presentation skills, with the ability to communicate complex security concepts to non-technical audiences.
• Strong project management and stakeholder management capabilities.
• Relevant certifications such as CISM, CRISC, or CISSP are highly desirable.
• Ability to work independently and collaboratively within a hybrid model, residing within reasonable commuting distance of Rustenburg, North West .

Benefits

This contract position offers a highly competitive daily rate, reflecting the senior-level expertise required. Our client provides a challenging and engaging project environment with significant opportunities to influence security strategy. The hybrid work model offers flexibility, balancing on-site collaboration with remote work. You will have the opportunity to work with a dedicated team and contribute to critical security initiatives. Professional development opportunities may be available through specific project-related training. This role is based in Rustenburg, North West , providing convenient access for local professionals.