Information Security Specialist - Governance, Risk & Compliance (GRC)

Placements24; Nuwerus; Hybrid; ZAR 600,000 - 900,000; Full time

Benefits offered by this job

Hybrid work model

Medical and retirement benefits

Career development and training

Job summary

Placements24 seeks an Information Security Specialist with a GRC focus to join a reputable corporate services firm. You will develop and maintain information security policies, standards and procedures while collaborating with multiple departments in a hybrid Kimberley-based setup.

Bring 3–5 years of information security experience, strong knowledge of ISO 27001/NIST, and familiarity with POPIA/GDPR. Relevant certifications and GRC tooling experience are highly regarded.

Qualifications

• Bachelor's degree in Information Security, Computer Science, Law, or a related field.
• Minimum of 3-5 years of experience in information security, with a strong focus on GRC.
• In-depth knowledge of information security principles, risk management, and compliance frameworks (e.g., ISO 27001, NIST).
• Familiarity with data privacy regulations such as POPIA and GDPR.
• Experience in conducting risk assessments and developing security policies.
• Strong analytical, problem-solving, and critical thinking skills.
• Excellent written and verbal communication skills, with the ability to create clear documentation and reports.
• Ability to work effectively in a hybrid environment in Kimberley.
• Relevant certifications such as CRISC, CISM, CISA, or CISSP are highly desirable.
• Proficiency with GRC tools is a plus.

Responsibilities

• Develop, implement, and maintain information security policies, standards, and procedures.
• Conduct information security risk assessments and identify areas for improvement.
• Ensure compliance with relevant regulations and standards (e.g., POPIA, ISO 27001).
• Manage the GRC framework, including policy management, risk registers, and compliance monitoring.
• Coordinate and support internal and external audits related to information security.
• Develop and deliver security awareness training programs.
• Monitor security control effectiveness and report on compliance status.
• Advise business units on security risks and compliance requirements.
• Assist in developing business continuity and disaster recovery plans from a GRC perspective.
• Stay current with evolving threats, regulations, and best practices in information security and GRC.

Skills

GRC

Risk assessment

Policy development

Information security

Compliance frameworks

POPIA/GDPR knowledge

Security certifications

GRC tools

Education

Bachelor's degree in Information Security/CS/related field

Tools

GRC tools

Job description

About the Role

Our client, a reputable corporate services firm, is seeking a dedicated Information Security Specialist with a focus on Governance, Risk, and Compliance (GRC) to join their growing team. This role offers a hybrid working model, combining remote flexibility with essential in-office collaboration in Kimberley . You will be instrumental in developing, implementing, and maintaining the organization's information security policies, standards, and procedures. Your responsibilities will include assessing security risks, ensuring compliance with regulatory requirements, and managing the overall GRC framework. The ideal candidate will possess a strong understanding of information security principles, risk management methodologies, and compliance frameworks. Excellent analytical, communication, and documentation skills are crucial for success in this role. You will work closely with various departments to embed robust security practices and ensure adherence to legal and regulatory obligations, contributing to the overall security posture of the firm in the Northern Cape.

Key Responsibilities

• Develop, implement, and maintain information security policies, standards, and procedures.
• Conduct information security risk assessments and identify areas for improvement.
• Ensure compliance with relevant regulations and standards (e.g., POPIA, ISO 27001).
• Manage the GRC framework, including policy management, risk registers, and compliance monitoring.
• Coordinate and support internal and external audits related to information security.
• Develop and deliver security awareness training programs.
• Monitor security control effectiveness and report on compliance status.
• Advise business units on security risks and compliance requirements.
• Assist in developing business continuity and disaster recovery plans from a GRC perspective.
• Stay current with evolving threats, regulations, and best practices in information security and GRC.

Requirements

• Bachelor's degree in Information Security, Computer Science, Law, or a related field.
• Minimum of 3-5 years of experience in information security, with a strong focus on GRC.
• In-depth knowledge of information security principles, risk management, and compliance frameworks (e.g., ISO 27001, NIST).
• Familiarity with data privacy regulations such as POPIA and GDPR.
• Experience in conducting risk assessments and developing security policies.
• Strong analytical, problem-solving, and critical thinking skills.
• Excellent written and verbal communication skills, with the ability to create clear documentation and reports.
• Ability to work effectively in a hybrid environment in Kimberley .
• Relevant certifications such as CRISC, CISM, CISA, or CISSP are highly desirable.
• Proficiency with GRC tools is a plus.

Benefits

• Competitive salary package with annual performance reviews.
• Comprehensive medical aid and retirement fund contributions.
• Hybrid work model offering a balance of remote and office-based work.
• Opportunities for professional development, training, and certifications.
• A stable and professional work environment in Kimberley .
• Generous annual leave and employee wellness programs.
• Pension fund benefits.
• Exposure to diverse GRC challenges and projects.
• Supportive management and collaborative team culture.
• Clear pathways for career advancement within the GRC domain.