Information Security Governance Specialist

Placements24; LegKraal Gate; Hybrid; ZAR 800,000 - 1,200,000; Full time

Benefits offered by this job

Competitive salary

Medical aid

Retirement benefits

Professional development opportunities

Supportive work environment

Job summary

Placements24 seeks an Information Security Governance Specialist to establish and maintain a GRC framework in Mahikeng, North West. You will develop policies, perform risk assessments, and report to management on compliance status.

You will collaborate with auditors and stakeholders, promote a security culture, and drive training programs to strengthen data protection and regulatory alignment across the organization.

Qualifications

• Bachelor's degree in IT, CS, Law, or related field.
• Minimum 4 years' experience in information security governance, risk, and compliance (GRC).
• Experience developing and implementing security policies and frameworks (ISO 27001, NIST).
• Strong knowledge of data protection laws such as POPIA and GDPR.
• Experience with GRC tools and risk management methodologies.
• Excellent analytical, documentation, and communication skills.
• Ability to collaborate with diverse teams and influence stakeholders.
• Experience developing training materials and conducting awareness sessions.
• Certifications CGEIT, CRISC, CISA, or CISSP are highly desirable.

Responsibilities

• Develop, implement, and maintain information security policies, standards, and procedures.
• Manage the organization's GRC program, ensuring alignment with regulatory requirements and industry best practices.
• Conduct regular compliance assessments and audits to identify gaps.
• Develop and maintain risk registers and track mitigation efforts.
• Prepare and present regular reports on security governance, risk, and compliance status to management.
• Oversee security awareness training programs and promote security best practices.
• Stay informed about changes in regulations and industry standards relevant to information security.
• Liaise with internal and external auditors regarding security compliance.
• Facilitate security governance committees and working groups.

Skills

Governance

GRC

Policy development

Risk management

Data protection

Audit liaison

Security awareness

Communication

Documentation

Education

Bachelor's degree in IT / CS / Law or related field

Tools

GRC tools

Job description

About the Role

Our client is seeking a dedicated Information Security Governance Specialist to join their team in Mahikeng, North West, ZA . This role is crucial for establishing and maintaining the framework that ensures information security policies and procedures are consistently applied and aligned with regulatory requirements and best practices. The ideal candidate will possess a strong understanding of governance, risk, and compliance (GRC) principles within the cybersecurity domain. You will be responsible for developing, implementing, and monitoring security governance programs, including policy management, compliance assessments, and risk reporting. This position offers a significant opportunity to shape and enhance the organization's security posture. The specialist will collaborate closely with various stakeholders to promote a strong security culture and ensure accountability across the organization. Your work will directly contribute to the protection of sensitive data and the maintenance of trust.

Key Responsibilities

• Develop, implement, and maintain information security policies, standards, and procedures.


• Manage the organization's GRC program, ensuring alignment with regulatory requirements and industry best practices.


• Conduct regular compliance assessments and audits to identify gaps.


• Develop and maintain risk registers and track mitigation efforts.


• Prepare and present regular reports on security governance, risk, and compliance status to management.


• Oversee security awareness training programs and promote security best practices.


• Stay informed about changes in regulations and industry standards relevant to information security.


• Liaise with internal and external auditors regarding security compliance.


• Facilitate security governance committees and working groups.

Requirements

• Bachelor's degree in Information Technology, Computer Science, Law, or a related field.


• Minimum of 4 years of experience in information security governance, risk, and compliance (GRC).


• Proven experience in developing and implementing security policies and frameworks (e.g., ISO 27001, NIST).


• Strong understanding of data protection regulations (e.g., POPIA, GDPR).


• Experience with GRC tools and risk management methodologies.


• Excellent analytical, documentation, and communication skills.


• Ability to work collaboratively with diverse teams and influence stakeholders.


• Proficiency in developing training materials and conducting awareness sessions.


• Relevant certifications such as CGEIT, CRISC, CISA, or CISSP are highly desirable.

Benefits

Our client offers a competitive salary, a comprehensive benefits package including medical aid and retirement benefits, opportunities for professional development, and a supportive work environment. This hybrid role is based in Mahikeng, North West, ZA , offering a mix of in-office collaboration and remote flexibility. Join our client and contribute to robust security governance.