Information Security Manager - Governance, Risk, and Compliance (GRC)

Placements24; Polokwane; Hybrid; ZAR 1,200,000 - 2,000,000; Full time

Benefits offered by this job

Executive-level salary and bonus

Executive health benefits

Company-sponsored retirement plan

Professional development budget

Hybrid work model

Executive car allowance

Leadership retreats

Job summary

Placements24 is seeking an experienced Information Security Manager to lead the Governance, Risk, and Compliance (GRC) function in Polokwane, Limpopo. This executive role develops and maintains security policies, standards, and procedures to ensure compliant operations across the organization.

You will drive risk assessments, security awareness, and continuous improvement, mentoring a team and influencing stakeholders.

Qualifications

• Master's degree in Information Security, Computer Science, Business Administration, or a related field.
• 8+ years in information security with at least 5 years in a GRC leadership or management role.
• Proven expertise in developing and implementing comprehensive GRC programs.
• In-depth knowledge of information security frameworks (ISO 27001, NIST CSF, COBIT).
• Strong understanding of legal and regulatory compliance requirements (POPIA, GDPR).
• Experience with risk management methodologies and tools.
• Excellent leadership, team management, and interpersonal skills.
• Strong analytical, problem-solving, and decision-making abilities.
• Exceptional written and verbal communication skills, with the ability to present complex information clearly.
• Relevant certifications such as CISM, CGEIT, CRISC, CISSP are highly desirable.

Responsibilities

• Develop, implement, and maintain the organization's information security GRC program.
• Oversee the creation and enforcement of information security policies, standards, and guidelines.
• Lead and manage information security risk assessments and control evaluations.
• Ensure compliance with relevant regulations and industry standards (e.g., POPIA, GDPR, ISMS).
• Manage the security incident response process and develop appropriate response plans.
• Develop and execute security awareness training programs for all employees.
• Oversee internal and external security audits, coordinating remediation efforts.
• Manage relationships with regulatory bodies and external auditors.
• Drive continuous improvement initiatives within the GRC function.
• Lead and mentor a team of GRC professionals.
• Report on the effectiveness of the GRC program to senior management and the board.
• Stay current with emerging GRC trends, threats, and regulatory changes.

Skills

GRC leadership

Risk management

ISO 27001

NIST CSF

COBIT

Stakeholder management

Information security

Communication

Education

Master's degree in Information Security

Job description

About the Role

Our client, a dynamic organization within the telecommunications sector, is seeking an experienced Information Security Manager to lead their Governance, Risk, and Compliance (GRC) function in Polokwane, Limpopo . This leadership role is responsible for developing, implementing, and maintaining the organization's information security policies, standards, and procedures to ensure compliance with legal, regulatory, and contractual requirements. You will oversee risk assessments, manage security awareness programs, and drive continuous improvement in the security posture. The ideal candidate is a strategic thinker with a strong understanding of GRC frameworks and a proven ability to manage a team and influence stakeholders across the organization. This is a key leadership opportunity to shape the security strategy and culture within a vital industry. The hybrid work arrangement offers a balance of in-office collaboration and remote flexibility, allowing for effective management and personal work-life integration. Your expertise will be crucial in navigating the complex regulatory landscape and ensuring robust security practices are upheld.

Key Responsibilities

• Develop, implement, and maintain the organization's information security GRC program.
• Oversee the creation and enforcement of information security policies, standards, and guidelines.
• Lead and manage information security risk assessments and control evaluations.
• Ensure compliance with relevant regulations and industry standards (e.g., POPIA, GDPR, ISMS).
• Manage the security incident response process and develop appropriate response plans.
• Develop and execute security awareness training programs for all employees.
• Oversee internal and external security audits, coordinating remediation efforts.
• Manage relationships with regulatory bodies and external auditors.
• Drive continuous improvement initiatives within the GRC function.
• Lead and mentor a team of GRC professionals.
• Report on the effectiveness of the GRC program to senior management and the board.
• Stay current with emerging GRC trends, threats, and regulatory changes.

Requirements

• Master's degree in Information Security, Computer Science, Business Administration, or a related field.
• Minimum of 8 years of progressive experience in information security, with at least 5 years in a GRC leadership or management role.
• Proven expertise in developing and implementing comprehensive GRC programs.
• In-depth knowledge of information security frameworks (e.g., ISO 27001, NIST CSF, COBIT).
• Strong understanding of legal and regulatory compliance requirements (e.g., POPIA, GDPR).
• Experience with risk management methodologies and tools.
• Excellent leadership, team management, and interpersonal skills.
• Strong analytical, problem-solving, and decision-making abilities.
• Exceptional written and verbal communication skills, with the ability to present complex information clearly.
• Relevant certifications such as CISM, CGEIT, CRISC, CISSP are highly desirable.
• Experience in the telecommunications industry is a plus.

Benefits

• Attractive executive-level salary and bonus package.
• Comprehensive executive health benefits.
• Company-sponsored retirement plan.
• Generous paid vacation and executive leave.
• Significant professional development budget for conferences, training, and certifications.
• Hybrid work model for optimal work-life balance.
• Opportunity to lead and significantly impact security strategy in Polokwane .
• Executive car allowance.
• Annual leadership retreats and team-building events.