Information Security Governance Specialist

Placements24; Sandton; Hybrid; ZAR 900,000 - 1,300,000; Full time

Benefits offered by this job

Medical aid

Retirement fund

Hybrid work model

Career development

Job summary

Placements24 in Sandton, Gauteng, seeks an experienced Information Security Governance Specialist to establish and maintain governance aligned with POPIA, GDPR, ISO 27001 and NIST.

You will lead policies, risk assessments and audits, collaborating with Legal, Compliance and IT in a hybrid setup with on-site Sandton offices and remote flexibility.

Qualifications

• 4+ years in information security governance, risk management and compliance (GRC).
• Experience with POPIA and GDPR regulatory frameworks.
• Experience conducting risk assessments and developing security policies.
• CGI/CRISC/CISA/CISSP certifications are desirable.
• Experience in the financial services sector in Gauteng is advantageous.

Responsibilities

• Develop, implement, and maintain information security policies, standards, and procedures.
• Conduct assessments to ensure compliance with regulations and frameworks (e.g., POPIA, GDPR, ISO 27001, NIST).
• Manage information security risk assessment process, identifying, evaluating, and mitigating risks.
• Oversee the security awareness training program and its effectiveness.
• Facilitate information security audits, internal and external, and manage remediation efforts.
• Monitor and report on the effectiveness of security controls and the overall compliance posture.
• Stay abreast of regulatory changes and industry best practices.
• Collaborate with legal, compliance, and IT teams to ensure integrated governance.
• Maintain documentation related to security policies, procedures, and controls.

Skills

GRC expertise

Stakeholder engagement

Analytical thinking

Regulatory understanding

Education

Bachelor’s degree in IT, Law, Business Admin, or related field

Tools

ISO 27001

NIST

COBIT

Job description

About the Role

Our client, a leading financial services firm in Sandton, Gauteng, is seeking an experienced Information Security Governance Specialist. This role is crucial for establishing and maintaining the framework that ensures the company's information security practices align with regulatory requirements, industry standards, and internal policies. You will be responsible for developing, implementing, and managing governance policies, conducting risk assessments, and ensuring compliance across the organization. The ideal candidate possesses a strong understanding of governance, risk, and compliance (GRC) principles, excellent analytical skills, and the ability to translate complex requirements into actionable security measures. This hybrid position offers a blend of on-site collaboration and remote flexibility.

Key Responsibilities

• Develop, implement, and maintain information security policies, standards, and procedures.
• Conduct regular assessments to ensure compliance with relevant regulations and frameworks (e.g., POPIA, GDPR, ISO 27001, NIST).
• Manage the information security risk assessment process, identifying, evaluating, and mitigating risks.
• Oversee the security awareness training program and ensure its effectiveness.
• Facilitate information security audits, both internal and external, and manage remediation efforts.
• Monitor and report on the effectiveness of security controls and the overall compliance posture.
• Stay abreast of changes in regulatory landscapes and industry best practices.
• Collaborate with legal, compliance, and IT teams to ensure integrated security governance.
• Maintain documentation related to security policies, procedures, and controls.

Requirements

• Bachelor's degree in Information Technology, Law, Business Administration, or a related field.
• Minimum of 4 years of experience in information security governance, risk management, and compliance (GRC).
• Strong knowledge of information security frameworks such as ISO 27001, NIST, COBIT.
• Familiarity with data privacy regulations (e.g., POPIA, GDPR).
• Experience in conducting risk assessments and developing security policies.
• Excellent analytical, problem-solving, and documentation skills.
• Strong communication and interpersonal skills, with the ability to engage with stakeholders at all levels.
• Relevant certifications like CGEIT, CRISC, CISA, or CISSP are highly desirable.
• Experience within the financial services sector in Gauteng is an advantage.

Benefits

• Our client offers a competitive salary, comprehensive medical aid, and retirement fund benefits.
• Opportunities for professional development, including advanced certifications and training, are provided.
• This hybrid role offers flexibility, allowing for a good work-life balance within our modern Sandton offices and remote work options.