Information Security Governance, Risk, and Compliance (GRC) Specialist

Placements24; LegKraal Gate; Hybrid; ZAR 600,000 - 950,000; Full time

Benefits offered by this job

Hybrid work model

Competitive salary

Medical aid and retirement benefits

Job summary

Placements24 is seeking an Information Security GRC Specialist to enhance the organization’s security framework from Mahikeng, North West. The role combines in-office collaboration with remote work in a hybrid setup.

The candidate will develop and maintain security policies, perform risk assessments, and support audits (POPIA, ISO 27001) while driving security awareness and ensuring regulatory compliance across the enterprise.

Qualifications

• Bachelor's degree or equivalent in a related field.
• Demonstrated analytical and regulatory knowledge in GRC.
• Strong written and verbal communication skills.

Responsibilities

• Develop, implement, and maintain information security policies, standards and procedures.
• Conduct risk assessments and develop mitigation strategies.
• Oversee internal and external security compliance audits (e.g., POPIA, ISO 27001).
• Deliver security awareness training to employees.
• Monitor regulatory changes and ensure ongoing compliance.
• Maintain GRC documentation and reporting metrics.

Skills

Analytical thinking

Regulatory knowledge

Communication

Education

Bachelor's degree in Information Security, Law, Business Administration, or related field

Tools

GRC tools

Job description

About the Role

Our client, a growing financial institution, is seeking a diligent Information Security Governance, Risk, and Compliance (GRC) Specialist to enhance their security framework. This role, based in Mahikeng, North West, is responsible for developing, implementing, and maintaining the organization's information security policies, standards, and procedures, ensuring alignment with regulatory requirements and industry best practices. You will play a key role in risk assessments, compliance audits, and security awareness programs. The ideal candidate possesses a strong understanding of GRC principles, excellent analytical skills, and the ability to navigate complex regulatory landscapes. This position offers a Hybrid work model, combining essential in-office collaboration in Mahikeng, North West with the convenience of remote work.

Key Responsibilities

• Develop, implement, and manage information security policies, standards, and procedures.


• Conduct information security risk assessments and develop mitigation strategies.


• Oversee and participate in internal and external security compliance audits (e.g., POPIA, ISO 27001).


• Develop and deliver security awareness training programs for employees.


• Monitor regulatory changes and ensure the organization remains compliant.


• Manage the inventory of security controls and assess their effectiveness.


• Support incident response activities by providing policy and compliance context.


• Maintain GRC documentation and reporting metrics.


• Collaborate with various departments to ensure security and compliance requirements are met.


• Stay informed about emerging GRC trends and best practices.

Requirements

• Bachelor's degree in Information Security, Law, Business Administration, or a related field.


• Minimum of 4 years of experience in information security governance, risk management, and compliance.


• Strong understanding of GRC frameworks such as ISO 27001, NIST CSF, and relevant data protection regulations (e.g., POPIA).


• Experience in conducting risk assessments and developing security policies.


• Familiarity with audit processes and methodologies.


• Excellent analytical, organizational, and problem-solving skills.


• Strong written and verbal communication skills, with the ability to present complex information clearly.


• Proficiency in GRC tools and platforms is a plus.


• Ability to work effectively in a Hybrid environment and manage multiple priorities.


• Must be able to commute to Mahikeng, North West for designated work requirements.

Benefits

• Our client offers a competitive salary, comprehensive benefits package including medical aid and retirement contributions, opportunities for professional development and certifications, and a collaborative work environment.


• Enjoy the benefits of a Hybrid work model, fostering both productivity and teamwork.


• This role is based in Mahikeng, North West, providing an opportunity to contribute to a vital organization within the region and build a rewarding career in GRC.