Information Security Governance Specialist

Placements24; South Africa; Hybrid; ZAR 900,000 - 1,300,000; Full time

Benefits offered by this job

Competitive salary

Medical aid and provident fund

Hybrid work model

Professional development support

Job summary

Placements24 is partnering with a leading financial institution to hire an Information Security Governance Specialist in Polokwane, Limpopo. You will build and maintain the information security governance framework, including policies, standards and procedures, ensuring alignment with regulatory and internal requirements.

You will drive risk management, audit collaboration, and security awareness across the organization, while monitoring evolving threats and regulatory changes.

Qualifications

• Bachelor's degree in IT, CS, Law or related field.
• Minimum 5 years in information security with GRC focus.
• Knowledge of ISO 27001, NIST CSF, COBIT.
• Experience developing security policies and procedures.
• Strong communication and audit collaboration skills.
• CISM/CRISC/CGEIT/CISSP preferred.

Responsibilities

• Develop and manage information security governance framework.
• Create and maintain security policies, standards and procedures.
• Ensure compliance with POPIA, Basel III and other requirements.
• Lead risk management processes and risk-based reviews.
• Oversee security awareness training programs.
• Coordinate internal and external audits.
• Report program effectiveness to senior management.

Skills

GRC governance

Risk assessment

Policy development

Audit coordination

Regulatory compliance

Education

Bachelor's degree in IT/CS/Law

Tools

ISO 27001

NIST CSF

COBIT

Job description

About the Role

Our client, a prominent financial institution operating across Southern Africa, is seeking a dedicated Information Security Governance Specialist to join their esteemed team in Polokwane, Limpopo . This role is essential for ensuring that our client's information security practices align with regulatory requirements, industry standards, and internal policies. The successful candidate will be responsible for developing, implementing, and maintaining the information security governance framework, including policies, standards, and procedures. This position requires a strong understanding of risk management, compliance, and security best practices. You will play a key role in shaping and enforcing the security posture of the organization, contributing to its reputation for trust and reliability. The role offers a significant impact on the organization's overall security strategy.

Key Responsibilities

• Develop, implement, and manage the organization's information security governance framework.
• Create, update, and maintain information security policies, standards, and procedures.
• Ensure compliance with relevant legal, regulatory, and contractual security requirements (e.g., POPIA, Basel III).
• Conduct regular reviews and assessments of security controls and practices to identify gaps.
• Manage the development and execution of risk management processes related to information security.
• Oversee the implementation of security awareness training programs for employees.
• Liaise with internal and external auditors to facilitate security audits and reviews.
• Monitor and report on the effectiveness of the information security program to senior management.
• Stay current with evolving security threats, vulnerabilities, and regulatory landscapes.
• Support the development and implementation of business continuity and disaster recovery plans.

Requirements

• Bachelor's degree in Information Technology, Computer Science, Law, or a related field.
• Minimum of 5 years of experience in information security, with a strong focus on governance, risk, and compliance (GRC).
• In-depth knowledge of information security frameworks such as ISO 27001, NIST Cybersecurity Framework, COBIT.
• Proven experience in developing and implementing security policies and procedures.
• Understanding of data privacy regulations, particularly POPIA.
• Strong analytical and problem-solving skills with meticulous attention to detail.
• Excellent written and verbal communication skills, with the ability to clearly articulate complex requirements.
• Experience working with internal and external audit processes.
• Professional certifications such as CISM, CRISC, CGEIT, or CISSP are highly desirable.
• Ability to work effectively independently and as part of a collaborative team.

Benefits

• competitive salary package commensurate with experience, along with performance-based incentives.
• Comprehensive medical aid, a provident fund, and generous annual leave are included.
• This role operates on a hybrid model, offering a balance between office-based work in Polokwane and remote flexibility.
• Employees benefit from substantial opportunities for professional development, including support for certifications and continuous learning initiatives.

Join a respected financial institution where your expertise in information security governance will be valued and contribute significantly to maintaining the integrity and security of operations.