It Security And Grc Manager Salary : + / - 1.25 Mil Pa Depending On Experience

Dgl Hr; Johannesburg; On-site; ZAR 1,250,000; Full time

Job summary

A leading company in Johannesburg is seeking an IT Security and GRC Manager to establish a framework ensuring information security aligns with business objectives. The role includes compliance with privacy regulations, IT audits, and disaster recovery planning. Ideal candidates will have a strong background in IT security, leadership skills, and relevant certifications.

Qualifications

• 3-5 years in IT Security and GRC; 1-2 years in senior leadership.
• Specialist knowledge in Email and Internet Security, Threat Management, Firewall.

Responsibilities

• Maintain policies, manage third-party risks, oversee contracts.
• Implement security reporting tools, identity and access management solutions.

Skills

Communication

Problem Solving

Analytical

Leadership

Customer-centricity

Education

3-year Degree in Computer Science or Informatics

CISSP, CISMITIL Certification

Tools

ISO

NIST Cybersecurity Framework

ITIL

DEV/SEC/OPS

Job description

Introduction

Please do not contact any of the recruiters directly. If your CV is successful, we will contact you. If you have not received feedback within 2 weeks, please consider your application unsuccessful.

Desired Experience & Qualification

• IT Security and GRC Manager
• Location: Johannesburg, Gauteng
• Salary: +/- 1.25 Mil Pa, depending on experience

The core purpose of the role is to establish and maintain a framework that provides assurance that information security strategies are aligned with business objectives, comply with applicable laws and regulations, and are supported by policies and internal controls. The role includes ensuring compliance with privacy regulations, coordinating IT audits, and supporting disaster recovery planning and testing.

Academic Requirements

• 3-year Degree in Computer Science or Informatics
• CISSP, CISMITIL Certification
• Advantageous: Knowledge of ISO, NIST Cybersecurity Framework, POPIA

Technical and Leadership Skills

• Certifications such as CISA, CRISC, CISSP, CISM or equivalent
• Experience in planning and developing IT security teams and strategies
• Exposure to data processing, hardware, enterprise software, and outsourced systems, especially Microsoft Technologies
• Experience with cloud solutions, influencing skills, strategic thinking, and business acumen
• Knowledge of ITIL, DEV/SEC/OPS, and vendor management
• 3-5 years in IT Security and GRC; 1-2 years in senior leadership
• Understanding of ITIL, ISO security standards, and legislations
• Specialist knowledge in Email and Internet Security, Threat Management, Firewall, SIEM, SOC, and Identity and Access Management

Skills

• Excellent communication, interpersonal, analytical, and problem-solving skills
• Ability to translate business needs into technical solutions
• Multi-tasking and independent work under pressure
• Strong verbal and written communication skills

Personal Attributes

• Relationship building, customer-centricity, leadership, problem-solving, urgency, and proactivity

Key Responsibilities

1. Governance and Risk: Maintain policies, manage third-party risks, oversee contracts, and develop security standards and metrics.
2. Security Governance: Implement security reporting tools, identity and access management solutions, and direct the organization's security approach.
3. Additional Duties: Draft policies, present for approval, and perform other management-requested functions.

Package & Remuneration

Salary: +/- 1.25 Mil Pa depending on experience