Information Security Manager - Governance, Risk, and Compliance (GRC)

Placements24; Vereeniging; Presencial; ZAR 1.000.000 - 1.400.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Competitive salary package

Medical aid and life insurance

Retirement fund benefits

Professional development and certs

Generous annual leave

Collaborative work environment

Direct impact on security posture

Descripción de la vacante

Placements24 is seeking an accomplished Information Security Manager to lead GRC initiatives and establish a comprehensive security program aligned with business goals and regulatory requirements. Based in Vereeniging, Gauteng, the role oversees policies, risk management, and awareness training across the organization.

The successful candidate will drive audits, regulatory compliance, and security culture, reporting to senior management and collaborating with legal and business units.

Formación

• 6+ years of information security with a GRC focus.
• Experience developing security policies and standards.
• Knowledge of risk management frameworks and methodologies.
• Experience with security audits and regulators.
• CISSP/CISM/CRISC/CGEIT are desirable.
• Based in Vereeniging, Gauteng, SA.

Responsabilidades

• Develop and maintain the information security governance framework, policies, and procedures.
• Oversee the information security risk management process (identification, assessment, mitigation, monitoring).
• Ensure compliance with POPIA, GDPR, ISO 27001, PCI DSS.
• Lead information security audits and remediation with auditors.
• Develop and manage information security awareness training for all employees.
• Report on GRC initiatives, security posture, and compliance to senior management.
• Collaborate with legal, compliance, and business units to integrate security into processes.
• Monitor threat landscape and advise on emerging risks and obligations.

Conocimientos

GRC

Risk management

Leadership

Audits

Regulatory compliance

POPIA knowledge

ISO 27001

CISSP

CISM

CRISC

Regulatory liaison

Educación

Bachelor’s degree in CS/IT/Law

Master’s degree is an advantage

Descripción del empleo

About the Role

Our client is seeking an accomplished Information Security Manager to lead their Governance, Risk, and Compliance (GRC) initiatives. This senior role is integral to establishing and maintaining a comprehensive security program that aligns with business objectives and regulatory requirements. You will be responsible for developing and implementing policies, assessing risks, ensuring compliance, and fostering a strong security culture across the organization. This is a key leadership position based in our client's office in Vereeniging, Gauteng , offering a direct and impactful contribution to the company's security framework.

Key Responsibilities

• Develop, implement, and maintain the organization's information security governance framework, policies, and procedures.


• Oversee the information security risk management process, including risk identification, assessment, mitigation, and monitoring.


• Ensure compliance with relevant laws, regulations, and industry standards (e.g., POPIA, GDPR, ISO 27001, PCI DSS).


• Manage and conduct information security risk assessments and vulnerability assessments.


• Develop and manage the information security awareness training program for all employees.


• Lead internal and external information security audits, liaising with auditors and facilitating remediation efforts.


• Monitor the threat landscape and advise on emerging risks and compliance obligations.


• Collaborate with legal, compliance, and business units to integrate security into business processes.


• Report on the status of GRC initiatives, security posture, and compliance to senior management.


• Champion a culture of security and compliance throughout the organization.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Law, or a related field.


• A Master’s degree is an advantage.


• Minimum of 6 years of progressive experience in information security, with a strong focus on GRC.


• Proven experience in developing and implementing security policies, procedures, and standards.


• In-depth knowledge of risk management frameworks and methodologies.


• Strong understanding of relevant legal and regulatory requirements impacting information security.


• Experience managing security audits and interacting with regulatory bodies.


• Excellent leadership, communication, and interpersonal skills.


• Strong analytical and problem‑solving abilities.


• Ability to manage complex projects and multiple priorities effectively.


• Relevant professional certifications such as CISSP, CISM, CRISC, CGEIT are highly desirable.


• Willingness to work from our office in Vereeniging, Gauteng .

Benefits

• Competitive salary package commensurate with experience and qualifications.


• Comprehensive medical aid, life insurance, and retirement fund benefits.


• Opportunities for professional development, training, and certifications.


• Generous annual leave and public holiday allowances.


• A collaborative and supportive work environment with a focus on professional growth.


• Direct impact on the security and compliance posture of a leading organization.