InfoSec GRC Leader – Hybrid (Pretoria)

Placements24; Gauteng; Hybrid; ZAR 900,000 - 1,300,000; Full time

Job summary

Placements24 in Pretoria, Gauteng, is seeking an experienced Information Security Manager to lead Compliance and Governance initiatives within a prominent financial services institution. The role offers a hybrid work model with regular engagement at the Pretoria office.

The ideal candidate will have 7+ years in information security, with strong governance, risk, and compliance expertise, and a solid understanding of ISO 27001/27002, NIST CSF, COBIT, PAIA/POPIA, and regulatory requirements.

Qualifications

• 7+ years in information security with governance, risk and compliance focus.
• Knowledge of ISO 27001/27002, NIST CSF, COBIT and ITIL.
• Familiarity with POPIA and financial sector regulations.
• Experience in risk assessments and audits.

Responsibilities

• Develop and maintain information security policies, standards, and procedures.
• Oversee risk management program: identification, assessment, and mitigation planning.
• Ensure compliance with legal, regulatory and contractual requirements.
• Coordinate internal and external security audits and provide evidence.
• Lead security awareness and training for all employees.
• Manage third-party risk and monitor KPIs/KRI s for the program.
• Collaborate with legal, internal audit and regulators on security matters.
• Guide business units on compliance and best practices.
• Mentor a team focused on governance and compliance.

Skills

GRC management

Information security governance

Risk assessment

Auditing

Leadership

Stakeholder management

Education

Bachelor's degree in IT, CS, LAW or related field

Master's degree or professional certifications desirable

Job description

Placements24 in Pretoria, Gauteng, is seeking an experienced Information Security Manager to lead Compliance and Governance initiatives within a prominent financial services institution. The role offers a hybrid work model with regular engagement at the Pretoria office.

The ideal candidate will have 7+ years in information security, with strong governance, risk, and compliance expertise, and a solid understanding of ISO 27001/27002, NIST CSF, COBIT, PAIA/POPIA, and regulatory requirements.