Information Security Specialist - Compliance

Placements24; Vereeniging; Hybrid; ZAR 600,000 - 900,000; Full time

Benefits offered by this job

Competitive salary

Professional development

Career growth

Retirement fund

Paid time off

Hybrid work schedule

Job summary

Placements24 is seeking an Information Security Specialist focused on compliance and governance in Vereeniging, Gauteng. You will help embed security and data privacy into daily operations, partnering with IT, legal, and business units to meet POPIA, GDPR, and ISO 27001 standards.

You will develop, monitor, and report on compliance programs, conducting audits and delivering security awareness training to staff in a hybrid work setting.

Qualifications

• Bachelor's degree or equivalent in Information Systems, Computer Science, Law, or related field.
• Minimum 4 years in information security with emphasis on compliance, governance and risk management.
• In-depth knowledge of POPIA and GDPR data protection regulations.
• Familiarity with ISO 27001, NIST, and PCI DSS frameworks.
• Strong analytical, problem-solving, and communication skills.

Responsibilities

• Develop, implement, and maintain security policies, standards, and procedures.
• Monitor compliance with POPIA, GDPR, ISO 27001, PCI DSS and other standards.
• Conduct internal audits and security assessments to identify gaps and risks.
• Deliver security awareness training to employees.
• Coordinate regulatory inquiries and audits processes.
• Collaborate with IT, legal, and business units to ensure security and compliance.
• Maintain documentation of security controls and compliance activities.
• Assist in data privacy initiatives and ongoing regulatory changes.

Skills

GRC

Regulatory compliance

Risk assessment

Auditing

Communication

Education

Bachelor's degree in Information Systems, Computer Science, or Law

Tools

ISO 27001

NIST

PCI DSS

Job description

About the Role

Our client is seeking a diligent and detail-oriented Information Security Specialist to focus on compliance and governance matters. This role, based in Vereeniging, Gauteng, is crucial for ensuring that our client's information security practices meet stringent regulatory requirements and industry standards. The successful candidate will play a key role in developing, implementing, and monitoring compliance frameworks, conducting security assessments, and driving adherence to policies. This is an excellent opportunity for a motivated professional to contribute to a robust compliance program within a dynamic organization. You will work closely with various departments to embed security and compliance into daily operations.

Key Responsibilities

• Develop, implement, and maintain information security policies, standards, and procedures.
• Monitor and assess compliance with relevant regulations (e.g., POPIA, GDPR) and industry standards (e.g., ISO 27001, PCI DSS).
• Conduct regular internal audits and security assessments to identify compliance gaps and risks.
• Develop and deliver security awareness training programs to employees.
• Manage the process of responding to regulatory inquiries and audits.
• Collaborate with IT, legal, and business units to ensure security and compliance requirements are met.
• Maintain documentation related to security policies, controls, and compliance activities.
• Assist in the development and implementation of data privacy initiatives.
• Stay up-to-date with evolving compliance requirements and cybersecurity best practices.

Requirements

• Bachelor's degree in Information Systems, Computer Science, Law, or a related field.
• Minimum of 4 years of experience in information security, with a significant focus on compliance, governance, and risk management (GRC).
• In-depth knowledge of data protection regulations such as POPIA and GDPR.
• Experience with security frameworks like ISO 27001, NIST, and PCI DSS.
• Familiarity with security auditing and risk assessment methodologies.
• Strong analytical, problem-solving, and communication skills.
• Ability to interpret and apply complex regulatory requirements.
• Relevant certifications such as CIPP/E, CGEIT, CRISC, or CISSP are advantageous.
• Willingness to work a hybrid schedule in Vereeniging, Gauteng.

Benefits

• Competitive salary and benefits package.
• Opportunities for professional development and certifications.
• Work in a growing and dynamic sector of the business.
• Contribute to maintaining high standards of security and compliance.
• Collaborative work environment.
• Paid time off and retirement fund.
• Potential for career growth within the compliance function.