InfoSec & Compliance Specialist — Hybrid

Placements24; Vereeniging; Hybrid; ZAR 600,000 - 900,000; Full time

Benefits offered by this job

Competitive salary

Professional development

Career growth

Retirement fund

Paid time off

Hybrid work schedule

Job summary

Placements24 is seeking an Information Security Specialist focused on compliance and governance in Vereeniging, Gauteng. You will help embed security and data privacy into daily operations, partnering with IT, legal, and business units to meet POPIA, GDPR, and ISO 27001 standards.

You will develop, monitor, and report on compliance programs, conducting audits and delivering security awareness training to staff in a hybrid work setting.

Qualifications

• Bachelor's degree or equivalent in Information Systems, Computer Science, Law, or related field.
• Minimum 4 years in information security with emphasis on compliance, governance and risk management.
• In-depth knowledge of POPIA and GDPR data protection regulations.
• Familiarity with ISO 27001, NIST, and PCI DSS frameworks.
• Strong analytical, problem-solving, and communication skills.

Responsibilities

• Develop, implement, and maintain security policies, standards, and procedures.
• Monitor compliance with POPIA, GDPR, ISO 27001, PCI DSS and other standards.
• Conduct internal audits and security assessments to identify gaps and risks.
• Deliver security awareness training to employees.
• Coordinate regulatory inquiries and audits processes.
• Collaborate with IT, legal, and business units to ensure security and compliance.
• Maintain documentation of security controls and compliance activities.
• Assist in data privacy initiatives and ongoing regulatory changes.

Skills

GRC

Regulatory compliance

Risk assessment

Auditing

Communication

Education

Bachelor's degree in Information Systems, Computer Science, or Law

Tools

ISO 27001

NIST

PCI DSS

Job description

Placements24 is seeking an Information Security Specialist focused on compliance and governance in Vereeniging, Gauteng. You will help embed security and data privacy into daily operations, partnering with IT, legal, and business units to meet POPIA, GDPR, and ISO 27001 standards.

You will develop, monitor, and report on compliance programs, conducting audits and delivering security awareness training to staff in a hybrid work setting.