Information Security Manager - Compliance & Governance

Placements24; Pretoria; Hybride; ZAR 900 000 - 1 500 000; Plein temps

Avantages offerts par ce poste

Competitive salary

Medical benefits

Retirement benefits

Performance bonuses

Career development

Résumé du poste

Placements24 invites an experienced Information Security Manager to lead Governance, Risk and Compliance programs for a premier financial services institution based in Pretoria. You will shape security policies, coordinate audits, and drive regulatory compliance across the business.

The role requires strong leadership, a deep understanding of ISO 27001/NIST CSF/COBIT, and the ability to translate complex requirements into actionable plans in a hybrid Pretoria office setting.

Qualifications

• Bachelor's degree in IT, Computer Science, Law or related field.
• Master's degree or relevant professional certifications are highly desirable.
• Minimum of 7 years of experience in information security focusing on governance, risk and compliance (GRC).
• In-depth knowledge of ISO 27001/27002, NIST CSF, COBIT, ITIL.

Responsabilités

• Develop and maintain information security policies, standards, and procedures.
• Oversee information security risk management, including risk identification, assessment, and mitigation planning.
• Ensure compliance with legal, regulatory and contractual requirements (e.g., POPIA, FICA, PAIA).
• Coordinate internal and external security audits, provide evidence and facilitate auditor requests.
• Develop and manage information security awareness and training for all employees.
• Lead third‑party risk management for information security.
• Establish and monitor KPIs and KRIs for the information security program.
• Liaise with legal, internal audit and regulators on security matters.
• Provide guidance to business units on compliance and best practices.
• Mentor a team of information security professionals.

Connaissances

GRC

ISO 27001

NIST CSF

Leadership

POPIA knowledge

Formation

Bachelor's degree in IT/CS or related

Master's degree desirable

Outils

GRC tools

Description du poste

About the Role

Our client, a prominent financial services institution headquartered in Pretoria, Gauteng , is seeking an experienced Information Security Manager to lead their Compliance and Governance initiatives. This senior role is responsible for ensuring that the organization's information security policies, procedures, and controls align with regulatory requirements, industry best practices, and business objectives. The ideal candidate will have a strong understanding of information security frameworks, risk management, and audit processes. You will play a key role in developing and maintaining the security governance program, conducting risk assessments, and managing security audits. This position offers a strategic leadership opportunity within a well-established organization, adopting a Hybrid work arrangement with regular engagement in our Pretoria office.

Key Responsibilities

• Develop, implement, and maintain the organization's information security policies, standards, and procedures.
• Oversee the information security risk management program, including risk identification, assessment, and mitigation planning.
• Ensure compliance with relevant legal, regulatory, and contractual requirements (e.g., POPIA, FICA, PAIA, industry standards).
• Manage and coordinate internal and external security audits, providing evidence and facilitating auditor requests.
• Develop and manage the information security awareness and training program for all employees.
• Lead the third-party risk management process for information security.
• Establish and monitor key performance indicators (KPIs) and key risk indicators (KRIs) for the information security program.
• Liaise with legal counsel, internal audit, and external regulators on security-related matters.
• Provide guidance and support to business units on information security compliance and best practices.
• Manage and mentor a team of information security professionals focused on compliance and governance.

Requirements

• Bachelor's degree in Information Technology, Computer Science, Law, or a related field.
• A Master's degree or relevant professional certifications are highly desirable.
• Minimum of 7 years of experience in information security, with a significant focus on governance, risk, and compliance (GRC).
• In-depth knowledge of information security frameworks such as ISO 27001/27002, NIST CSF, COBIT, and ITIL.
• Strong understanding of South African data privacy regulations (POPIA) and financial sector regulations.
• Proven experience in conducting risk assessments, security audits, and developing remediation plans.
• Excellent understanding of IT controls, audit principles, and governance best practices.
• Strong leadership, communication, and stakeholder management skills.
• Ability to translate complex technical and regulatory requirements into actionable business strategies.
• Experience with GRC tools is a plus.
• Experience in the financial services industry is highly preferred.

Benefits

Our client provides a competitive salary, comprehensive medical and retirement benefits, performance-driven bonuses, and ample opportunities for professional development and career advancement. You will be part of a respected institution in Pretoria, Gauteng , working in a strategic Hybrid capacity.