Remote GRC Policy & Security Lead

Placements24; Durban; Hybride; ZAR 1 482 000 - 2 470 000; Plein temps

Résumé du poste

Placements24 is seeking a remote Information Security Officer specializing in GRC to join a globally distributed team. You will develop, implement, and maintain policies, standards, and procedures ensuring regulatory and industry compliance while advancing the organization’s security posture.

The role requires 6+ years in information security with a GRC focus, experience building governance frameworks, risk assessments, audits, and awareness programs.

Qualifications

• Bachelor's degree in CS/InfoSec/Law or related field.
• 6+ years in Information Security with a strong GRC focus.
• Experience building and implementing security policies and procedures.
• Knowledge of ISO 27001, NIST, COBIT, GDPR, POPIA.
• CISA/CRISC/CISSP/CISM certifications preferred.

Responsabilités

• Develop, implement, and manage information security governance framework.
• Conduct risk assessments and develop mitigation strategies.
• Coordinate internal and external security audits and assessments.
• Maintain information security policies, standards, and guidelines.
• Ensure compliance with GDPR, POPIA, ISO 27001 and other regs.
• Manage third-party risk assessments and vendor security reviews.
• Develop and deliver security awareness training programs.
• Serve as a point of contact for GRC inquiries and initiatives.
• Monitor effectiveness of controls and recommend improvements.
• Stay informed on emerging GRC trends and regulatory changes.

Connaissances

GRC governance

Risk assessment

Policy development

Audit management

Remote work

Formation

Bachelors in CS/IS/Law

Outils

GRC tools

ISO 27001 tooling

Description du poste

Placements24 is seeking a remote Information Security Officer specializing in GRC to join a globally distributed team. You will develop, implement, and maintain policies, standards, and procedures ensuring regulatory and industry compliance while advancing the organization’s security posture.

The role requires 6+ years in information security with a GRC focus, experience building governance frameworks, risk assessments, audits, and awareness programs.