Information Security Manager - Compliance & Governance

Placements24; Gauteng; Hybrid; ZAR 900,000 - 1,300,000; Full time

Job summary

Placements24 in Pretoria, Gauteng, is seeking an experienced Information Security Manager to lead Compliance and Governance initiatives within a prominent financial services institution. The role offers a hybrid work model with regular engagement at the Pretoria office.

The ideal candidate will have 7+ years in information security, with strong governance, risk, and compliance expertise, and a solid understanding of ISO 27001/27002, NIST CSF, COBIT, PAIA/POPIA, and regulatory requirements.

Qualifications

• 7+ years in information security with governance, risk and compliance focus.
• Knowledge of ISO 27001/27002, NIST CSF, COBIT and ITIL.
• Familiarity with POPIA and financial sector regulations.
• Experience in risk assessments and audits.

Responsibilities

• Develop and maintain information security policies, standards, and procedures.
• Oversee risk management program: identification, assessment, and mitigation planning.
• Ensure compliance with legal, regulatory and contractual requirements.
• Coordinate internal and external security audits and provide evidence.
• Lead security awareness and training for all employees.
• Manage third-party risk and monitor KPIs/KRI s for the program.
• Collaborate with legal, internal audit and regulators on security matters.
• Guide business units on compliance and best practices.
• Mentor a team focused on governance and compliance.

Skills

GRC management

Information security governance

Risk assessment

Auditing

Leadership

Stakeholder management

Education

Bachelor's degree in IT, CS, LAW or related field

Master's degree or professional certifications desirable

Job description

About the Role

Our client, a prominent financial services institution headquartered in Pretoria, Gauteng , is seeking an experienced Information Security Manager to lead their Compliance and Governance initiatives. This senior role is responsible for ensuring that the organization's information security policies, procedures, and controls align with regulatory requirements, industry best practices, and business objectives. The ideal candidate will have a strong understanding of information security frameworks, risk management, and audit processes. You will play a key role in developing and maintaining the security governance program, conducting risk assessments, and managing security audits. This position offers a strategic leadership opportunity within a well-established organization, adopting a Hybrid work arrangement with regular engagement in our Pretoria office.

Key Responsibilities

• Develop, implement, and maintain the organization's information security policies, standards, and procedures.
• Oversee the information security risk management program, including risk identification, assessment, and mitigation planning.
• Ensure compliance with relevant legal, regulatory, and contractual requirements (e.g., POPIA, FICA, PAIA, industry standards).
• Manage and coordinate internal and external security audits, providing evidence and facilitating auditor requests.
• Develop and manage the information security awareness and training program for all employees.
• Lead the third-party risk management process for information security.
• Establish and monitor key performance indicators (KPIs) and key risk indicators (KRIs) for the information security program.
• Liaise with legal counsel, internal audit, and external regulators on security-related matters.
• Provide guidance and support to business units on information security compliance and best practices.
• Manage and mentor a team of information security professionals focused on compliance and governance.

Requirements

• Bachelor's degree in Information Technology, Computer Science, Law, or a related field.
• A Master's degree or relevant professional certifications are highly desirable.
• Minimum of 7 years of experience in information security, with a significant focus on governance, risk, and compliance (GRC).
• In-depth knowledge of information security frameworks such as ISO 27001/27002, NIST CSF, COBIT, and ITIL.
• Strong understanding of South African data privacy regulations (POPIA) and financial sector regulations.
• Proven experience in conducting risk assessments, security audits, and developing remediation plans.
• Excellent understanding of IT controls, audit principles, and governance best practices.
• Strong leadership, communication, and stakeholder management skills.
• Ability to translate complex technical and regulatory requirements into actionable business strategies.
• Experience with GRC tools is a plus.
• Experience in the financial services industry is highly preferred.

Benefits

Our client provides a competitive salary, comprehensive medical and retirement benefits, performance-driven bonuses, and ample opportunities for professional development and career advancement. You will be part of a respected institution in Pretoria, Gauteng , working in a strategic Hybrid capacity.