InfoSec & GRC Specialist — Policy & Compliance

Placements24; Cape Town; On-site; ZAR 520,000 - 780,000; Full time

Benefits offered by this job

Competitive salary

Health insurance

Professional development

Generous paid time off

Job summary

Placements24 is seeking an Information Security Specialist focused on Governance, Risk, and Compliance (GRC) to join the team in Upington. You will develop, implement, and maintain security policies, and ensure regulatory compliance while managing risks and fostering a security-aware culture.

The role includes supporting audits, developing BC/DR plans, and driving certification readiness. 3–5 years' experience in GRC and a Bachelor's degree are required.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Law, or a related field.
• 3–5 years of information security experience focusing on GRC, policy development and compliance.
• Strong understanding of information security frameworks (ISO 27001, NIST CSF) and risk management.
• Knowledge of data privacy regulations and compliance requirements.
• Excellent analytical and communication skills.

Responsibilities

• Develop, update, and maintain information security policies, standards, and guidelines.
• Conduct risk assessments and manage remediation of identified risks.
• Ensure compliance with relevant legal, regulatory, and contractual requirements (POPIA, GDPR).
• Manage security awareness programs and promote a security-conscious culture.
• Support audits related to information security and compliance.
• Contribute to business continuity and disaster recovery planning.

Skills

GRC expertise

Policy development

ISO 27001, NIST CSF

Risk management

Regulatory compliance

Communication skills

Education

Bachelor's degree in CS/IT/Law

Tools

GRC tools

Job description

Placements24 is seeking an Information Security Specialist focused on Governance, Risk, and Compliance (GRC) to join the team in Upington. You will develop, implement, and maintain security policies, and ensure regulatory compliance while managing risks and fostering a security-aware culture.

The role includes supporting audits, developing BC/DR plans, and driving certification readiness. 3–5 years' experience in GRC and a Bachelor's degree are required.