Information Security Specialist (GRC)

Placements24; Vereeniging; Hybrid; ZAR 700,000 - 900,000; Full time

Benefits offered by this job

Hybrid work model

Professional development opportunities

Competitive salary package

Job summary

Placements24 seeks an Information Security Specialist focused on Governance, Risk and Compliance (GRC) to join our client in Vereeniging, Gauteng. This hybrid role supports integrating security and compliance into daily operations and shaping the organisation's GRC strategy.

The role requires 4+ years in Information Security with strong GRC experience and knowledge of POPIA and ISO 27001. Certifications such as CGEIT/CRISC/CISA are highly desirable.

Qualifications

• Bachelor’s degree in IT, CS, Law or related field.
• Minimum 4 years in Information Security with a strong GRC focus.
• Experience implementing and managing GRC frameworks and processes.
• Knowledge of governance, risk management and compliance principles.
• Certifications such as CGEIT, CRISC or CISA are desirable.

Responsibilities

• Develop, implement, and maintain GRC policies, standards, and procedures.
• Perform information security risk assessments and remediation planning.
• Oversee compliance with POPIA, GDPR, ISO 27001 and related standards.
• Manage internal and external audits and liaise with auditors.
• Deliver security awareness training programs.
• Monitor KPIs to measure control effectiveness.
• Advise departments on security and compliance requirements.
• Support incident management from a compliance perspective.

Skills

Analytical skills

Report writing

Communication skills

Education

Bachelor's degree in Information Technology / Computer Science / Law

Job description

About the Role

Our client is seeking a proactive Information Security Specialist with a focus on Governance, Risk, and Compliance (GRC) to join their team. This hybrid role, based in Vereeniging, Gauteng , is crucial for ensuring our client meets regulatory requirements and maintains a strong security posture. You will be instrumental in developing, implementing, and managing GRC programs, conducting risk assessments, and ensuring adherence to security policies and standards. The position requires a meticulous individual with a solid understanding of GRC frameworks, audit processes, and security best practices. You will work collaboratively with various departments to integrate security and compliance into daily operations. This role offers a great opportunity to shape and influence our client's GRC strategy in a dynamic environment.

Key Responsibilities

• Develop, implement, and maintain GRC policies, standards, and procedures.
• Conduct information security risk assessments and manage remediation plans.
• Oversee compliance with relevant regulations and industry standards (e.g., POPIA, GDPR, ISO 27001).
• Manage internal and external security audits, acting as a point of contact for auditors.
• Develop and deliver security awareness training programs.
• Monitor security metrics and Key Performance Indicators (KPIs) to assess the effectiveness of security controls.
• Advise business units on security and compliance requirements.
• Support incident management processes from a compliance perspective.

Requirements

• Bachelor's degree in Information Technology, Computer Science, Law, or a related field.
• Minimum of 4 years of experience in Information Security, with a strong focus on GRC.
• Proven experience in implementing and managing GRC frameworks and processes.
• In-depth knowledge of IT governance, risk management, and compliance principles.
• Familiarity with South African data protection laws (e.g., POPIA) and international standards like ISO 27001.
• Excellent analytical, report-writing, and communication skills.
• Relevant certifications such as CGEIT, CRISC, or CISA are highly desirable.
• Ability to work effectively in a hybrid setting.

Benefits

• Key role in shaping the organisation's GRC framework.
• Competitive salary and benefits package.
• Hybrid work model providing flexibility.
• Opportunities for professional development and certification.
• Exposure to a wide range of security and compliance challenges.
• Collaborative and supportive team environment.