Information Security Specialist (GRC)

Placements24; Cape Town; On-site; ZAR 520,000 - 780,000; Full time

Benefits offered by this job

Competitive salary

Health insurance

Professional development

Generous paid time off

Job summary

Placements24 is seeking an Information Security Specialist focused on Governance, Risk, and Compliance (GRC) to join the team in Upington. You will develop, implement, and maintain security policies, and ensure regulatory compliance while managing risks and fostering a security-aware culture.

The role includes supporting audits, developing BC/DR plans, and driving certification readiness. 3–5 years' experience in GRC and a Bachelor's degree are required.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Law, or a related field.
• 3–5 years of information security experience focusing on GRC, policy development and compliance.
• Strong understanding of information security frameworks (ISO 27001, NIST CSF) and risk management.
• Knowledge of data privacy regulations and compliance requirements.
• Excellent analytical and communication skills.

Responsibilities

• Develop, update, and maintain information security policies, standards, and guidelines.
• Conduct risk assessments and manage remediation of identified risks.
• Ensure compliance with relevant legal, regulatory, and contractual requirements (POPIA, GDPR).
• Manage security awareness programs and promote a security-conscious culture.
• Support audits related to information security and compliance.
• Contribute to business continuity and disaster recovery planning.

Skills

GRC expertise

Policy development

ISO 27001, NIST CSF

Risk management

Regulatory compliance

Communication skills

Education

Bachelor's degree in CS/IT/Law

Tools

GRC tools

Job description

About the Role

Our client is seeking a proactive and detail-oriented Information Security Specialist with a focus on Governance, Risk, and Compliance (GRC) to join their team in Upington . This role is responsible for developing, implementing, and maintaining the organization's information security policies, procedures, and standards. You will play a key role in ensuring regulatory compliance, managing risks, and fostering a strong security-aware culture. This position offers an excellent opportunity to contribute to the overall security posture and compliance framework of the organization.

Key Responsibilities

• Develop, update, and maintain information security policies, standards, and guidelines.
• Conduct regular risk assessments and manage the remediation of identified risks.
• Monitor and ensure compliance with relevant legal, regulatory, and contractual requirements (e.g., POPIA, GDPR).
• Manage security awareness training programs and promote a security-conscious culture across the organization.
• Support internal and external audits related to information security and compliance.
• Contribute to the development and maintenance of business continuity and disaster recovery plans.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Law, or a related field.
• 3-5 years of experience in information security, with a focus on GRC, policy development, and compliance.
• Strong understanding of information security frameworks (e.g., ISO 27001, NIST CSF) and risk management principles.
• Knowledge of data privacy regulations and compliance requirements.
• Excellent analytical, written, and verbal communication skills.
• Experience with GRC tools and platforms is a plus.

Benefits

• Competitive salary and potential for annual performance bonuses.
• Comprehensive health, dental, and vision insurance.
• Support for professional development and relevant certifications (e.g., CRISC, CGEIT).
• Generous paid time off and a collaborative work environment.
• The opportunity to significantly influence the organization's GRC strategy and execution.