Information Security Risk Manager

Placements24; Richards Bay; On-site; ZAR 1,000,000 - 1,600,000; Full time

Benefits offered by this job

Comprehensive health benefits

Retirement plan

Performance bonuses

Relocation assistance may be available

Job summary

Placements24 is seeking an Information Security Risk Manager in Richards Bay, KwaZulu-Natal to lead risk management initiatives. The role focuses on identifying, assessing, and mitigating information security risks across the organization, with responsibility for developing risk frameworks and ensuring regulatory compliance.

The ideal candidate has a strong background in risk management, cybersecurity best practices, and excellent analytical and communication skills.

Qualifications

• Bachelor's degree in Information Security, Computer Science, Risk Management, or related field.
• Minimum of 6 years of information security experience with a focus on risk management.
• Experience in developing and implementing information security risk frameworks (e.g., ISO 31000, NIST RMF).
• Knowledge of cybersecurity threats, vulnerabilities, and controls.
• Experience in risk assessments and mitigation strategies.
• Familiarity with POPIA, GDPR compliance requirements.
• Certifications such as CRISC, CISM, CISSP are highly desirable.

Responsibilities

• Develop, implement, and maintain the information security risk management framework.
• Conduct regular risk assessments to identify, analyze, and evaluate information security risks.
• Develop risk mitigation strategies and action plans, and track their implementation.
• Monitor the threat landscape and assess potential organizational impact.
• Ensure compliance with industry regulations and data protection laws.
• Deliver security risk awareness training to employees.
• Collaborate with IT, legal, and business units to integrate risk management into operations.
• Prepare risk reports for senior management and stakeholders.
• Oversee incident management from a risk perspective.
• Contribute to business continuity and disaster recovery planning.

Skills

Risk management

Risk assessment

Stakeholder comms

Analytical thinking

Decision making

Education

Bachelor's degree in Information Security

Tools

ISO 31000

NIST RMF

Job description

About the Role

Our client, a major player in the industrial sector, is seeking a highly experienced Information Security Risk Manager to lead their risk management initiatives from Richards Bay, KwaZulu-Natal . This senior role is responsible for identifying, assessing, and mitigating information security risks across the organization. You will develop and implement comprehensive risk management frameworks, conduct risk assessments, and ensure compliance with relevant regulations and policies. The ideal candidate will possess a strong understanding of risk management principles, cybersecurity best practices, and have excellent analytical and communication skills. This position offers the opportunity to significantly influence the security posture of a large organization and work within a key industrial hub.

Key Responsibilities

• Develop, implement, and maintain the information security risk management framework.
• Conduct regular risk assessments to identify, analyze, and evaluate information security risks.
• Develop risk mitigation strategies and action plans, and track their implementation.
• Monitor the threat landscape and assess the potential impact on the organization.
• Ensure compliance with relevant industry regulations and data protection laws.
• Develop and deliver security risk awareness training to employees.
• Collaborate with IT, legal, and business units to integrate risk management into daily operations.
• Prepare risk reports for senior management and relevant stakeholders.
• Oversee the incident management process from a risk perspective.
• Contribute to the development of business continuity and disaster recovery plans.

Requirements

• Bachelor's degree in Information Security, Computer Science, Risk Management, or a related field.
• Minimum of 6 years of experience in information security, with a strong focus on risk management.
• Proven experience in developing and implementing information security risk frameworks (e.g., ISO 31000, NIST RMF).
• Strong understanding of cybersecurity threats, vulnerabilities, and controls.
• Experience with conducting risk assessments and developing mitigation strategies.
• Knowledge of relevant regulations and compliance requirements (e.g., POPIA, GDPR).
• Excellent analytical, problem-solving, and decision-making skills.
• Strong communication and interpersonal skills, with the ability to engage with stakeholders at all levels.
• Relevant certifications such as CRISC, CISM, CISSP are highly desirable.
• Experience in the industrial or manufacturing sector is a plus.

Benefits

• Competitive salary package.
• Comprehensive health and retirement benefits.
• Performance-based bonuses.
• Professional development opportunities and support for certifications.
• Relocation assistance may be available for exceptional candidates.
• Opportunity to make a significant impact in a key industrial role in Richards Bay, KwaZulu-Natal .
• Stable and supportive work environment.