Information Security Manager - Compliance and Governance

Placements24; Mossel Bay; Hybrid; ZAR 1,200,000 - 1,900,000; Full time

Benefits offered by this job

Competitive salary and benefits

Hybrid work model in Mossel Bay

Professional development opportunities

Job summary

Placements24 in Mossel Bay, Western Cape, seeks an experienced Information Security Manager to lead governance, risk and compliance initiatives. The role focuses on developing robust information security policies, standards, and procedures to ensure adherence to ISO 27001, POPIA, and GDPR.

The successful candidate will manage security programs, mentor the team, and collaborate with IT, legal, and business units to embed security across the organization while staying ahead of evolving threats.

Qualifications

• Bachelor's degree in Computer Science or Information Security; master's preferred.
• 7+ years in information security with 3+ in governance, risk and compliance.
• Knowledge of ISO 27001, NIST, COBIT frameworks.
• Experience with POPIA and GDPR regulatory requirements.
• Proven experience developing and implementing security policies and procedures.
• Strong risk management principles and methodologies.
• Excellent leadership and communication skills.
• CISSP/CISM/CRISC certifications preferred.

Responsibilities

• Develop, maintain the information security program, policies, standards and procedures.
• Oversee risk assessments and audits (ISO 27001, POPIA, GDPR).
• Ensure compliance with legal, regulatory and contractual security requirements.
• Manage the information security incident response plan and coordination.
• Develop and deliver security awareness training programs.
• Lead and mentor the information security team.
• Collaborate with IT, legal and business units to embed security.
• Monitor emerging threats and regulatory changes.

Skills

Information security leadership

Governance & risk management

Regulatory compliance

ISO 27001 knowledge

NIST/ COBIT knowledge

Security incident response

Security training delivery

Team mentorship

Stakeholder collaboration

CISSP/CISM/CRISC

Education

Bachelor's in Computer Science or Information Security

Master's degree

Job description

About the Role

Our client, a well-established energy corporation, is seeking an experienced Information Security Manager to lead their compliance and governance initiatives. This role is based in the scenic coastal city of Mossel Bay, Western Cape, ZA , and operates under a hybrid work model. You will be responsible for developing and implementing robust information security policies, standards, and procedures to ensure compliance with relevant regulations and industry frameworks. This is a critical leadership position that requires a strategic thinker with a deep understanding of cybersecurity governance, risk management, and compliance (GRC). You will play a key role in safeguarding the company's critical infrastructure and sensitive data.

Key Responsibilities

• Develop, implement, and maintain the organization's information security program, policies, standards, and procedures.
• Oversee and manage information security risk assessments and compliance audits (e.g., ISO 27001, POPIA, GDPR).
• Ensure adherence to all applicable legal, regulatory, and contractual security requirements.
• Manage the information security incident response plan and coordinate response efforts.
• Develop and deliver security awareness training programs to employees.
• Lead and mentor the information security team, fostering a culture of security excellence.
• Collaborate with internal stakeholders, including IT, legal, and business units, to integrate security into all aspects of the organization.
• Stay informed about emerging threats, vulnerabilities, and regulatory changes.

Requirements

• Bachelor's degree in Computer Science, Information Security, or a related field. A Master's degree is a plus.
• Minimum of 7 years of experience in information security, with at least 3 years in a management or leadership role focusing on governance, risk, and compliance.
• In-depth knowledge of information security frameworks such as ISO 27001, NIST, COBIT.
• Experience with data privacy regulations (e.g., POPIA, GDPR).
• Proven experience in developing and implementing security policies and procedures.
• Strong understanding of risk management principles and methodologies.
• Excellent leadership, communication, and interpersonal skills.
• Relevant security certifications such as CISSP, CISM, CRISC are highly preferred.

Benefits

• Our client offers a competitive salary commensurate with experience and a comprehensive benefits package, including excellent medical aid, a generous retirement fund contribution, and performance-based bonuses.
• The hybrid work arrangement in Mossel Bay, Western Cape, ZA allows for a desirable work-life balance.
• Professional development opportunities, including training and conference attendance, are provided.
• This role offers the chance to lead a vital security function within a respected organization and contribute to its long-term success.