Information Security Manager - GRC

Placements24; Gauteng; Hybrid; ZAR 1,000,000 - 1,600,000; Full time

Benefits offered by this job

Private medical insurance

Retirement annuity

Leave days

Professional development

Hybrid work model

Job summary

Placements24 in Pretoria, Gauteng, seeks an experienced Information Security Manager focused on GRC to design and manage our security program. You will lead policies, risk assessments, audits, and vendor reviews to ensure robust governance and protection of critical assets.

The role requires 7+ years in information security with at least 3 in GRC, strong leadership, and the ability to drive change across a dynamic organization. Hybrid working arrangements are available.

Qualifications

• Bachelor's degree in Information Security, Computer Science, or Law.
• Master's degree is a plus.
• 7+ years in Information Security with at least 3 in GRC.

Responsibilities

• Develop, implement, and maintain the organization's Information Security GRC framework.
• Oversee risk assessments and mitigate vulnerabilities.
• Ensure compliance with POPIA, GDPR, ISO 27001 and other standards.
• Manage third-party risk assessments and vendor security reviews.
• Lead security audits and remediation of findings.
• Develop security policies, standards, and procedures.
• Foster a security-aware culture across the company.
• Collaborate with legal, compliance, and business units.
• Report to senior management on GRC program effectiveness.

Skills

Leadership

Communication

Interpersonal skills

Presentation skills

Education

Bachelor's degree in Information Security, Computer Science, Law

Master's degree (advantage)

Job description

About the Role

Our client, a rapidly growing technology enterprise based in Pretoria, Gauteng , is seeking an experienced and strategic Information Security Manager with a strong focus on Governance, Risk, and Compliance (GRC). This leadership role will be responsible for developing, implementing, and managing the organization's information security GRC program. The successful candidate will ensure compliance with relevant regulations and industry standards, manage security risks, and foster a security-aware culture across the company. This is an excellent opportunity to lead critical security functions for a prominent organization in Pretoria .

Key Responsibilities

• Develop, implement, and maintain the organization's Information Security GRC framework.
• Oversee risk assessments, identify security vulnerabilities, and develop mitigation strategies.
• Ensure compliance with applicable laws, regulations, and industry standards (e.g., POPIA, GDPR, ISO 27001).
• Manage third-party risk assessments and vendor security reviews.
• Develop and deliver security awareness training programs to employees.
• Lead internal and external security audits and ensure timely remediation of audit findings.
• Manage the development and implementation of security policies, standards, and procedures.
• Monitor the evolving threat landscape and regulatory environment, making necessary adjustments to the GRC program.
• Collaborate with legal, compliance, and business units to integrate security into business processes.
• Report on the effectiveness of the GRC program to senior management and relevant stakeholders.

Requirements

• Bachelor's degree in Information Security, Computer Science, Law, or a related field.
• A Master's degree is a plus.
• Minimum of 7 years of progressive experience in Information Security, with at least 3 years focused on GRC.
• Proven experience in developing and implementing information security policies, standards, and procedures.
• In-depth knowledge of GRC frameworks, risk assessment methodologies, and regulatory requirements.
• Experience with conducting security audits and managing audit remediation efforts.
• Strong understanding of information security principles, technologies, and best practices.
• Excellent leadership, communication, interpersonal, and presentation skills.
• Relevant certifications such as CISSP, CISM, CISA, CRISC are highly desirable.
• Experience working with government or regulated industries in Pretoria is an advantage.
• Ability to manage complex projects and drive change within a dynamic organization.

Benefits

• Our client offers a highly competitive salary package, commensurate with experience, along with performance-based bonuses.
• The company provides a comprehensive benefits package, including private medical insurance, a retirement annuity, and generous leave days.
• Opportunities for continuous professional development, including advanced certifications and leadership training, are readily available.
• The work environment is collaborative and dynamic, fostering innovation and growth.
• This role presents a significant opportunity for career advancement within the cybersecurity field in Gauteng , with a flexible Hybrid work model.