Information Security Officer - Policy and Compliance

Placements24; East London; Hybrid; ZAR 480,000 - 720,000; Full time

Benefits offered by this job

Competitive salary

Health benefits

Retirement plan

Paid time off

Fully remote

Professional development

Home office stipend

Job summary

Placements24 partners with a growing consulting firm specializing in data protection to hire an Information Security Officer with a focus on policy and compliance. This remote role involves developing, implementing, and maintaining information security policies, procedures, and guidelines to ensure regulatory alignment.

You will conduct risk assessments, manage compliance programs, and advise internal teams and clients on security matters.

Qualifications

• Bachelor's degree in Information Security, Computer Science, Law, or related field.
• Minimum 3 years of information security experience focusing on policy development, compliance, or risk management.
• In-depth knowledge of POPIA and GDPR; familiarity with ISO 27001, NIST CSF, SOC 2.

Responsibilities

• Develop, review, and update information security policies, standards, and procedures.
• Ensure compliance with legal, regulatory, and contractual requirements (POPIA, GDPR, ISO 27001).
• Conduct information security risk assessments and develop mitigation plans.
• Manage and coordinate internal and external security audits.
• Develop and deliver security awareness training programs.
• Act as a point of contact for security-related inquiries from internal teams and clients.
• Monitor compliance with security policies and procedures.
• Assist in the development and implementation of security incident response plans.
• Stay current with evolving security threats, vulnerabilities, and regulatory changes.
• Evaluate and recommend security tools and technologies to enhance the compliance posture.
• Maintain security documentation and records.

Skills

Policy development

Compliance

Risk management

Information security

Data privacy regulations

POPIA

GDPR

ISO 27001

NIST CSF

SOC 2

Audit experience

Security frameworks

Communication

Education

Bachelor's degree in Information Security / CS / Law

Job description

About the Role

Our client, a growing consulting firm specializing in data protection, is seeking an Information Security Officer with a strong focus on Policy and Compliance to join their remote team. This role is vital for developing, implementing, and maintaining comprehensive information security policies, procedures, and guidelines to ensure adherence to regulatory requirements and industry best practices. You will be responsible for conducting risk assessments, managing compliance programs, and providing guidance on security matters to internal stakeholders and clients. The ideal candidate possesses excellent knowledge of data privacy laws (such as POPIA and GDPR), security frameworks, and audit processes. This is a fantastic opportunity for a detail-oriented security professional to make a significant contribution in a flexible, remote work environment. Your expertise will be critical in safeguarding sensitive information and ensuring our client operates within the highest standards of security and compliance. We value a proactive approach to security and a commitment to continuous improvement.

Key Responsibilities

• Develop, review, and update information security policies, standards, and procedures.
• Ensure compliance with relevant legal, regulatory, and contractual requirements (e.g., POPIA, GDPR, ISO 27001).
• Conduct information security risk assessments and develop mitigation plans.
• Manage and coordinate internal and external security audits.
• Develop and deliver security awareness training programs.
• Act as a point of contact for security-related inquiries from internal teams and clients.
• Monitor compliance with security policies and procedures.
• Assist in the development and implementation of security incident response plans.
• Stay current with evolving security threats, vulnerabilities, and regulatory changes.
• Evaluate and recommend security tools and technologies to enhance the compliance posture.
• Maintain security documentation and records.

Requirements

• Bachelor's degree in Information Security, Computer Science, Law, or a related field.
• Minimum of 3 years of experience in information security, with a focus on policy development, compliance, or risk management.
• In-depth understanding of data privacy regulations like POPIA and GDPR.
• Knowledge of information security frameworks such as ISO 27001, NIST CSF, or SOC 2.
• Experience with risk assessment methodologies.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills, with the ability to draft clear and concise policies.
• Ability to work independently and manage multiple priorities in a remote setting.
• Relevant certifications such as CompTIA Security+, CIPP, or CRISC are a plus.
• Experience in a consulting or advisory role is beneficial.

Benefits

• Competitive salary commensurate with experience.
• Comprehensive health benefits package.
• Retirement savings options.
• Generous paid time off.
• Fully remote work arrangement providing maximum flexibility.
• Opportunities for professional development and acquiring new certifications.
• Chance to work with diverse clients and contribute to critical data protection initiatives.
• Supportive and collaborative virtual team environment.
• Home office stipend to create an optimal remote workspace.