Information Security Manager - GRC Lead

Placements24; Centurion; Hybrid; ZAR 1,200,000 - 2,000,000; Full time

Benefits offered by this job

Competitive executive bonus structure

Comprehensive healthcare coverage

Generous annual leave and executive-le

Job summary

Placements24 client, a leading financial services institution in Centurion, Gauteng, seeks a senior Information Security Manager to lead the GRC function. You will develop and oversee information security policies, risk management, and regulatory compliance to protect sensitive data and systems.

You will manage a GRC team, coordinate audits, be the security voice with stakeholders at all levels, implement ISO 27001/NIST CSF aligned controls, and drive awareness and improvement across the

Qualifications

• Master's degree in Information Security, Cybersecurity, Law, Business Administration, or a related field.
• Minimum of 7 years of experience in information security, with at least 4 years in a GRC leadership role.
• Proven experience in developing and managing comprehensive GRC programs.
• In-depth knowledge of information security frameworks (ISO 27001, NIST CSF) and regulatory requirements.
• Strong understanding of risk management methodologies and practices.
• Experience with security audit processes and compliance management.
• Excellent leadership, communication, and interpersonal skills.
• Ability to effectively manage stakeholders at all levels of the organization.
• Relevant certifications such as CISSP, CISM, CISA, CRISC are highly desirable.

Responsibilities

• Develop, implement, and maintain the organization's information security GRC program, including policies, standards, and procedures.
• Oversee risk assessments, identify security vulnerabilities, and develop mitigation strategies.
• Ensure compliance with relevant national and international regulations (e.g., POPIA, GDPR, SOX, PCI DSS).
• Manage security audits, both internal and external, and ensure timely remediation of findings.
• Develop and deliver security awareness training programs for employees across the organization.
• Lead and mentor the GRC team, fostering a culture of high performance and continuous improvement.
• Manage third-party risk assessments and ensure vendor compliance with security requirements.
• Develop and maintain the incident response plan and lead the coordination of incident management activities.
• Stay current with emerging security threats, vulnerabilities, and regulatory changes.
• Report on the state of information security risk and compliance to senior management and relevant committees.

Skills

GRC leadership

Information security

Stakeholder management

Risk assessment

Regulatory compliance

Policy development

Cybersecurity certifications (CISSP/C○

Education

Master's degree in Information Security or related field

Advanced regulatory/compliance knowledge

Tools

ISO 27001

NIST CSF

Job description

About the Role

Our client, a prominent financial services institution based in Centurion, Gauteng , is seeking a highly accomplished and strategic Information Security Manager to lead their Governance, Risk, and Compliance (GRC) function. This senior role is responsible for developing, implementing, and overseeing the organization's information security policies, procedures, and standards to ensure robust protection of sensitive data and systems. The successful candidate will play a crucial role in managing the information security risk landscape, ensuring regulatory compliance, and fostering a strong security-aware culture. This is a leadership position that requires a deep understanding of GRC principles, excellent stakeholder management skills, and the ability to translate complex security requirements into actionable business strategies. Join our client in Centurion, Gauteng and contribute to shaping a secure and compliant operational environment. You will have the opportunity to lead a dedicated team and influence the direction of security initiatives across the enterprise. Your leadership will be key to navigating the complex regulatory environment and maintaining the trust of our clients and partners.

Key Responsibilities

• Develop, implement, and maintain the organization's information security GRC program, including policies, standards, and procedures.
• Oversee risk assessments, identify security vulnerabilities, and develop mitigation strategies.
• Ensure compliance with relevant national and international regulations (e.g., POPIA, GDPR, SOX, PCI DSS).
• Manage security audits, both internal and external, and ensure timely remediation of findings.
• Develop and deliver security awareness training programs for employees across the organization.
• Lead and mentor the GRC team, fostering a culture of high performance and continuous improvement.
• Manage third-party risk assessments and ensure vendor compliance with security requirements.
• Develop and maintain the incident response plan and lead the coordination of incident management activities.
• Stay current with emerging security threats, vulnerabilities, and regulatory changes.
• Report on the state of information security risk and compliance to senior management and relevant committees.

Requirements

• Master's degree in Information Security, Cybersecurity, Law, Business Administration, or a related field.
• Minimum of 7 years of experience in information security, with at least 4 years in a GRC leadership role.
• Proven experience in developing and managing comprehensive GRC programs.
• In-depth knowledge of information security frameworks (e.g., ISO 27001, NIST CSF) and regulatory requirements.
• Strong understanding of risk management methodologies and practices.
• Experience with security audit processes and compliance management.
• Excellent leadership, communication, and interpersonal skills.
• Ability to effectively manage stakeholders at all levels of the organization.
• Relevant certifications such as CISSP, CISM, CISA, CRISC are highly desirable.
• Experience in the financial services industry is a significant advantage.

Benefits

• Highly competitive salary and executive bonus structure.
• Comprehensive healthcare coverage, including medical, dental, and vision.
• Generous annual leave and executive leave package.
• Executive-level professional development opportunities and support for advanced certifications.
• Company-matched retirement savings plan.
• Key leadership role with significant strategic impact in Centurion, Gauteng.
• A challenging and rewarding work environment within a reputable financial institution.
• Access to sophisticated security tools and resources.
• Relocation assistance may be considered for exceptional candidates.
• Regular team-building activities and corporate events.