Information Security Officer - Governance & Policy

Placements24; Polokwane; Hybrid; ZAR 900,000 - 1,300,000; Full time

Benefits offered by this job

Competitive salary

Medical aid

Retirement fund

Professional development

Hybrid work

Generous leave

Mentorship

Employee assistance

Job summary

Placements24 in Polokwane, Limpopo is seeking an experienced Information Security Officer focused on Governance, Risk and Compliance (GRC). You will develop and implement security policies, manage risk, and ensure regulatory compliance while promoting a security-aware culture across the organisation.

The role requires a bachelor’s degree in information security or related fields, 4+ years in information security, and relevant certifications (CISM/CRISC/CISSP desirable).

Qualifications

• Bachelor's degree in Information Security, Computer Science, Law, or a related field.
• Minimum of 4 years of experience in information security with governance, risk management and compliance focus.
• In-depth knowledge of GRC frameworks (ISO 27001, NIST CSF, COBIT).
• Familiarity with South African data protection laws (POPIA) and other regulations.
• Experience developing and implementing security policies and procedures.
• Strong analytical and problem-solving skills with attention to detail.
• Excellent written and verbal communication skills; able to explain security concepts to diverse audiences.
• Ability to manage multiple priorities and work in a team or independently.
• Certifications such as CISM, CRISC, CISSP or CGEIT are desirable.
• Experience in logistics or supply chain is a plus.

Responsibilities

• Develop, review, and update information security policies, standards, and guidelines.
• Implement and manage the information security risk management program.
• Ensure compliance with legal, regulatory, and contractual security requirements.
• Oversee information security awareness and training for all employees.
• Manage relationships with external auditors and regulatory bodies.
• Conduct security assessments of new projects and third-party vendors.
• Develop and maintain security metrics and reporting for senior management.
• Advise on information security best practices and risk mitigation strategies.
• Contribute to business continuity and disaster recovery planning.
• Stay informed about evolving threats and regulatory changes.

Skills

GRC knowledge

Regulatory compliance

Security awareness

Communication skills

Education

Bachelor's degree in Information Security or related field

Certifications such as CISM/CRISC/CISSP desirable

Tools

ISO 27001

NIST CSF

COBIT

POPIA compliance

Job description

About the Role

Our client, a dynamic player in the logistics sector, is seeking an experienced Information Security Officer with a strong focus on Governance, Risk, and Compliance (GRC) to join their team in Polokwane, Limpopo . This role is responsible for developing, implementing, and maintaining the organization's information security policies, standards, and procedures. You will play a key role in ensuring compliance with relevant regulations, managing information security risks, and promoting a security-aware culture throughout the company. The ideal candidate will have a solid understanding of GRC frameworks and a pragmatic approach to security management. This position offers the chance to significantly influence the security direction of a growing enterprise.

Key Responsibilities

• Develop, review, and update information security policies, standards, and guidelines.
• Implement and manage the information security risk management program.
• Ensure compliance with relevant legal, regulatory, and contractual security requirements.
• Oversee the information security awareness and training programs for all employees.
• Manage relationships with external auditors and regulatory bodies.
• Conduct security assessments and reviews of new projects and third-party vendors.
• Develop and maintain security metrics and reporting for senior management.
• Advise business units on information security best practices and risk mitigation strategies.
• Contribute to the development and maintenance of the business continuity and disaster recovery plans.
• Stay informed about evolving security threats, vulnerabilities, and regulatory landscapes.

Requirements

• Bachelor's degree in Information Security, Computer Science, Law, or a related field.
• Minimum of 4 years of experience in information security, with a strong emphasis on governance, risk management, and compliance.
• In-depth knowledge of GRC frameworks (e.g., ISO 27001, NIST Cybersecurity Framework, COBIT).
• Familiarity with South African data protection laws (e.g., POPIA) and other relevant regulations.
• Experience in developing and implementing security policies and procedures.
• Strong analytical and problem-solving skills with excellent attention to detail.
• Effective written and verbal communication skills, with the ability to communicate complex security concepts to diverse audiences.
• Ability to manage multiple priorities and work effectively within a team and independently.
• Relevant certifications such as CISM, CRISC, CISSP, or CGEIT are highly desirable.
• Experience in the logistics or supply chain industry is a plus.

Benefits

• Competitive annual salary and performance-based bonuses.
• Comprehensive medical aid and retirement fund contributions.
• Opportunities for professional development, training, and certifications.
• Hybrid work model offering flexibility for employees in Polokwane, Limpopo .
• Be a key contributor to the security posture of a growing organization.
• Collaborative and professional working environment.
• Generous annual leave and paid time off.
• Mentorship from experienced security professionals.
• Exposure to various security initiatives and projects.
• Employee assistance program.