Information Security Manager - Compliance and Governance

Placements24; Welkom; Hybride; ZAR 900 000 - 1 300 000; Plein temps

Avantages offerts par ce poste

Health insurance

Retirement fund contributions

Performance incentives

Résumé du poste

Placements24 in Welkom, Free State, seeks an experienced Information Security Manager to lead compliance and governance. You will develop and maintain policies, standards, and procedures to meet regulatory requirements, while guiding risk management, audits, and security awareness.

This hybrid role requires strong leadership, knowledge of ISO 27001/NIST/COBIT, and ability to manage complex GRC projects across the organization, with a focus on continuous security maturity and collaboration with

Qualifications

• 8+ years in information security with at least 5 years in governance, risk and compliance (GRC) leadership.
• In-depth knowledge of ISO 27001, NIST and COBIT frameworks.
• Experience developing security policies, risk assessments and compliance programs.
• Strong data privacy knowledge and ability to lead audits and vendor risk management.

Responsabilités

• Develop, implement, and manage information security policies, standards and procedures.
• Ensure regulatory compliance (POPIA, GDPR where applicable) and industry standards.
• Oversee risk assessments and mitigation strategies.
• Coordinate internal and external security audits.
• Deliver security awareness training for all employees.
• Lead incident response planning and execution for security breaches.
• Build relationships with stakeholders and monitor control effectiveness.
• Stay updated on emerging threats and regulatory changes.

Connaissances

GRC leadership

Policy development

Risk assessment

Audit management

Security training

Incident response

Stakeholder management

Security governance

ISO 27001

NIST/COBIT

Formation

Bachelor's degree in Information Security / CS / Law

Master's degree or relevant certifications (CISM, CRISC, CISSP)

Description du poste

About the Role

Our client, a well-established financial services group in Welkom , Free State, is seeking an experienced Information Security Manager to lead their compliance and governance initiatives. This critical role involves developing, implementing, and maintaining the organization's information security policies, standards, and procedures to ensure adherence to regulatory requirements and industry best practices. You will play a key role in risk management, audit coordination, and security awareness programs. This position offers a dynamic work environment with a hybrid model, allowing for collaboration and flexibility within the Free State province. The ideal candidate will possess strong leadership skills, a deep understanding of cybersecurity frameworks, and a proven ability to manage complex compliance projects.

Key Responsibilities

• Develop, implement, and manage the organization's information security policies, standards, and procedures.
• Ensure compliance with relevant regulatory frameworks (e.g., POPIA, GDPR if applicable) and industry standards.
• Oversee information security risk assessments and implement appropriate mitigation strategies.
• Manage and coordinate internal and external security audits.
• Develop and deliver comprehensive security awareness training programs for all employees.
• Lead the incident response planning and execution for security breaches.
• Establish and maintain strong relationships with key stakeholders across the organization.
• Monitor the effectiveness of security controls and recommend improvements.
• Stay informed about emerging threats, vulnerabilities, and regulatory changes impacting information security.
• Manage and mentor the information security compliance team.

Requirements

• Bachelor's degree in Information Security, Computer Science, Law, or a related field; Master's degree or relevant certifications (e.g., CISM, CRISC, CISSP) are highly desirable.
• Minimum of 8 years of experience in information security, with at least 5 years in a management or leadership role focusing on governance, risk, and compliance (GRC).
• In-depth knowledge of information security frameworks such as ISO 27001, NIST, COBIT.
• Proven experience in conducting risk assessments, developing security policies, and managing compliance programs.
• Strong understanding of data privacy regulations and requirements.
• Excellent leadership, communication, and interpersonal skills.
• Experience with audit management and vendor risk management.
• Ability to analyze complex security issues and provide practical solutions.
• Experience working within a hybrid work environment.
• Familiarity with the financial services sector is a plus.

Benefits

Our client offers a competitive salary package, comprehensive health insurance, retirement fund contributions, performance incentives, and ample opportunities for professional development. You will have the chance to lead critical security initiatives in Welkom and contribute to the overall security maturity of the organization, working within a supportive and professional team.