IT Security Governance & Policy Architect

Sasso Consulting (Pty) Ltd

Johannesburg

On-site

ZAR 900,000 - 1,300,000

Full time

3 days ago

Be an early applicant

Application generator

Stand out for this role — generate a tailored resume and cover letter in about a minute.

Get past ATS filters

Job summary

Sasso Consulting (Pty) Ltd is seeking an experienced IT Security Governance and Policy Specialist to design, implement and improve information security governance frameworks. You will translate requirements into practical policies, controls and compliance processes across complex enterprise IT environments.

The role focuses on risk management, regulatory compliance including POPIA, and aligning security practices with business objectives.

Qualifications

Degree/diploma in IT, information systems or cybersecurity.
3–5 years in IT security governance or GRC roles.
Experience developing and maintaining security policies and standards.
Knowledge of ISO/IEC 27001, NIST or COBIT.
Experience with risk assessments and audit support.

Responsibilities

Develop, implement and maintain information security policies and governance frameworks.
Assess and monitor information security risk and regulatory compliance.
Coordinate audits and maintain audit evidence and remediation tracking.
Advise on governance structures, reporting and policy improvements.
Collaborate with cross-functional teams on risk, compliance and awareness.
Prepare governance reports and management dashboards.