IT Security Manager: Governance, Risk & Compliance

Top Vitae Recruitment; Gqeberha; On-site; ZAR 900,000 - 1,300,000; Full time

Job summary

Top Vitae Recruitment is seeking an IT Security Manager to lead governance, risk management, and compliance across the organization. The role focuses on developing security policies, driving governance adoption, and partnering with stakeholders to embed security in business processes.

The role will manage risk assessments, maintain the enterprise risk register, coordinate audit activities, and lead security awareness initiatives.

Qualifications

• 5+ years of experience in information security, governance, risk management, compliance, or audit.
• Knowledge of information security principles, governance practices, and risk management processes.
• Experience coordinating audits, assessments, findings, and remediation activities.
• Experience developing and maintaining security policies, standards, procedures, and awareness programs.
• Strong written and verbal communication, and ability to influence stakeholders.

Responsibilities

• Lead security governance across the organization, developing policies and guiding adoption.
• Oversee risk management, maintain risk registers, and track remediation timelines.
• Coordinate internal and external security assessments and audit activities.
• Develop security awareness programs and provide guidance on security responsibilities.
• Conduct third-party security reviews and manage vendor security risk remediation.
• Support security program planning, reporting, and governance process improvements.

Skills

Information security governance

Risk management

Audit coordination

Policy development

Stakeholder management

Security awareness

Education

Bachelor's degree in Information Security / related

CISSP or similar certification (CISM, CRISC, CGRC, ISO 27001 Lead Implementer)

Job description

Top Vitae Recruitment is seeking an IT Security Manager to lead governance, risk management, and compliance across the organization. The role focuses on developing security policies, driving governance adoption, and partnering with stakeholders to embed security in business processes.

The role will manage risk assessments, maintain the enterprise risk register, coordinate audit activities, and lead security awareness initiatives.