ISGRC Leader — IT Risk, Security & Compliance

Transnet SOC Ltd; oThongathi; On-site; ZAR 1,000,000 - 1,800,000; Full time

Job summary

Transnet SOC Ltd seeks a senior leader to drive IT governance, risk, and compliance across the enterprise. You will shape the ISGRC strategy, oversee risk assessments, and coordinate regulatory compliance with internal teams and external auditors.

The role requires deep knowledge of COBIT, ITIL, ISO/IEC 27001 and King IV, plus experience in incident response and security governance. You will mentor staff and promote information security awareness across the organisation.

Qualifications

• Related degree with 8+ years in IT risk, security governance, or audit.
• CISSP or equivalent certifications preferred.
• Knowledge of COBIT, ITIL, King IV and regulatory obligations is essential.
• Ability to lead governance, risk assessment and regulatory compliance initiatives.

Responsibilities

• Develop and maintain ISGRC strategy aligned to business goals and regulatory requirements.
• Lead IT risk assessments, define mitigation plans and track closure to tolerance levels.
• Coordinate IT regulatory compliance across the organisation and liaise with auditors.
• Provide advisory services to IT teams on policy, control design and risk remediation.

Skills

IT risk management

Information security

IT governance

IT compliance

COBIT

ITIL

ISO/IEC 27001

King IV

Regulatory obligations

Security incident response

Education

Bachelor's degree in Computer Science/IT/IS

Certified Information Systems Security Professional (CISSP)

Tools

SAP

Windows Server / Active Directory

Palo Alto firewall

Vulnerability management

SIEM

Job description

Transnet SOC Ltd seeks a senior leader to drive IT governance, risk, and compliance across the enterprise. You will shape the ISGRC strategy, oversee risk assessments, and coordinate regulatory compliance with internal teams and external auditors.

The role requires deep knowledge of COBIT, ITIL, ISO/IEC 27001 and King IV, plus experience in incident response and security governance. You will mentor staff and promote information security awareness across the organisation.