Information Security Manager

Placements24; Bloemfontein; Hybrid; ZAR 1,000,000 - 1,600,000; Full time

Benefits offered by this job

Medical aid

Provident fund

Performance bonuses

Hybrid work arrangement

Generous leave

Job summary

Placements24 is seeking an Information Security Manager in Bloemfontein to lead and mature the cybersecurity program. You will oversee policy, risk, incident response, and security awareness while guiding a small team and collaborating with IT leadership to protect data and operations.

The role is hybrid, with a focus on strategic security initiatives and regulatory compliance, including POPIA and GDPR, in a growing logistics organization.

Qualifications

• 6+ years in information security with at least 2 years in management.
• Experience in building and executing comprehensive information security programs.
• Strong knowledge of ISO 27001, NIST CSF, risk management, and incident response.
• Familiarity with regulatory requirements and security technologies.

Responsibilities

• Develop, implement, and maintain the information security strategy and roadmap.
• Establish and enforce security policies, standards, and procedures across the enterprise.
• Oversee risk management activities including assessments and mitigations.
• Lead the incident response team for timely handling of breaches.
• Manage security awareness training for employees.
• Oversee selection and management of security technologies and tools.
• Ensure compliance with POPIA, GDPR and industry standards.
• Mentor a team of information security professionals.
• Report security posture and program status to senior management.
• Stay abreast of emerging threats and technologies.

Skills

Leadership

Security strategy

Policy development

Risk management

Incident response

Security awareness

Budget management

Vendor management

Communication

Education

Bachelor's degree in Computer Science/IT/Cybersecurity

Tools

Firewalls

IDS/IPS

SIEM

Endpoint protection

Vulnerability management tools

Job description

About the Role

Our client, a leading regional logistics company based in Bloemfontein, Free State , is seeking a seasoned Information Security Manager to lead and mature their cybersecurity program. This role involves overseeing all aspects of information security, including policy development, risk management, incident response, and security awareness training. You will manage a small team of security professionals and collaborate closely with IT leadership and business units to ensure the protection of sensitive company data and operational systems. The ideal candidate is a strategic thinker with strong leadership skills and a comprehensive understanding of current cybersecurity threats and best practices. This is a critical opportunity to shape the security future of a growing organization.

Key Responsibilities

• Develop, implement, and maintain the organization's information security strategy and roadmap.
• Establish and enforce information security policies, standards, and procedures across the enterprise.
• Oversee risk management activities, including risk assessments, vulnerability management, and the implementation of mitigation controls.
• Lead the incident response team, ensuring timely and effective handling of security breaches and cyber incidents.
• Manage security awareness training programs to educate employees on security best practices and potential threats.
• Oversee the selection, implementation, and management of security technologies and tools.
• Ensure compliance with relevant regulations and industry standards (e.g., POPIA, GDPR).
• Manage and mentor a team of information security professionals.
• Report on security posture, incidents, and program status to senior management.
• Stay current with emerging cybersecurity threats, vulnerabilities, and technologies.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Minimum of 6 years of experience in information security, with at least 2 years in a management or leadership role.
• Proven experience in developing and implementing comprehensive information security programs.
• Strong knowledge of security frameworks (ISO 27001, NIST CSF), risk management, and incident response.
• Experience with security technologies such as firewalls, IDS/IPS, SIEM, endpoint protection, and vulnerability management tools.
• Excellent leadership, communication, and interpersonal skills.
• Ability to manage budgets and vendor relationships.
• Understanding of relevant legal and regulatory requirements.
• Relevant certifications such as CISSP, CISM, or CISA are highly desirable.

Benefits

• Our client offers a competitive salary and benefits package, including medical aid, a provident fund, and performance-based bonuses.
• This hybrid role provides a balance between in-office collaboration and remote flexibility.
• Employees benefit from a supportive work environment, opportunities for professional development, and the chance to lead significant security initiatives within a respected organization.
• The package includes ample annual leave, and the company is committed to fostering a strong security culture and supporting employee growth.