Information Security Manager - GRC

Placements24; Randburg; On-site; ZAR 900,000 - 1,500,000; Full time

Benefits offered by this job

Health insurance

Retirement plan with company match

Generous annual leave

Professional development opportunities

Salary incentives and performancebased

Job summary

Placements24 is seeking a seasoned Information Security Manager to lead the GRC function and develop a comprehensive information security program. The role focuses on governance, risk, and compliance, aligning with regulatory requirements and business objectives.

Based in Randburg, you will drive policy development, audits, and security awareness while mentoring a GRC team. You will oversee risk assessments, vendor risk, and security metrics, ensuring confidentiality, integrity, and availability

Qualifications

• 7+ years in information security with at least 3 in a leadership role focusing on GRC.
• Strong knowledge of ISO 27001 and NIST, risk management, and regulatory compliance.
• Proven track record in policy development and program implementation.
• Experience with GRC tools and third-party risk management.
• CISSP / CISM / CRISC / CISA certifications required.

Responsibilities

• Develop and execute the information security strategy with a GRC focus.
• Identify, assess, and manage information security risks.
• Establish and maintain security policies, standards, procedures.
• Ensure regulatory compliance (POPIA, GDPR, ISO 27001).
• Lead internal and external security audits.
• Oversee security awareness training.
• Direct incident response planning and execution.
• Manage vendor risk assessments and third-party reviews.
• Develop security metrics and reporting.
• Lead and mentor the GRC team.

Skills

Leadership

GRC expertise

Risk management

Policy development

Stakeholder communication

Education

Bachelor's degree

Master's degree

Tools

GRC tools

Job description

About the Role

Our client is seeking a seasoned and strategic Information Security Manager to lead their Governance, Risk, and Compliance (GRC) function. This leadership role is responsible for developing, implementing, and maintaining a comprehensive information security program that aligns with business objectives and regulatory requirements. You will oversee risk assessments, policy development, compliance monitoring, and security awareness initiatives to ensure the confidentiality, integrity, and availability of our client's information assets. This is a permanent, on-site position based in Randburg . We are looking for a strong leader with deep expertise in GRC principles, excellent communication skills, and the ability to drive security best practices across the organization. Your leadership will be instrumental in maintaining our client's security posture and ensuring adherence to all relevant standards.

Key Responsibilities

• Develop and execute the organization's information security strategy, focusing on GRC.
• Oversee the identification, assessment, and management of information security risks.
• Establish and maintain information security policies, standards, and procedures.
• Ensure compliance with relevant industry regulations and legal requirements (e.g., POPIA, GDPR, ISO 27001).
• Lead and manage internal and external security audits.
• Develop and manage security awareness training programs for all employees.
• Oversee the incident response planning and execution process.
• Manage vendor risk assessments and third-party security reviews.
• Direct the development and implementation of security metrics and reporting.
• Lead, mentor, and develop a team of GRC professionals.

Requirements

• Bachelor's degree in Information Security, Computer Science, Business Administration, or a related field. A Master's degree is a plus.
• Minimum of 7 years of experience in information security, with at least 3 years in a management or leadership role focusing on GRC.
• In-depth knowledge of information security frameworks (ISO 27001, NIST), risk management methodologies, and compliance regulations.
• Proven experience in developing and implementing comprehensive security policies and programs.
• Strong understanding of IT controls, security architecture, and best practices.
• Excellent leadership, communication, and interpersonal skills.
• Demonstrated ability to manage complex projects and drive cross-functional initiatives.
• Experience with GRC tools and technologies.
• Relevant professional certifications such as CISSP, CISM, CRISC, CISA are required.
• Experience in the financial services or a related regulated industry is highly preferred.

Benefits

• Attractive salary package with performance-based incentives.
• Comprehensive health, dental, and vision insurance.
• Retirement savings plan with company matching.
• Generous annual leave and paid time off.
• Significant opportunities for professional development and leadership training.
• Key role in driving security excellence for a leading organization in Randburg .
• Exposure to high-level strategic security decision-making.
• Supportive management and a collaborative team environment.
• Long-term career growth prospects.
• Annual performance reviews and salary increments.