Remote Information Security Manager - Compliance and Governance

Placements24; Mtubatuba Local Municipality; Hybride; ZAR 900 000 - 1 350 000; Plein temps

Avantages offerts par ce poste

Private health insurance

Retirement annuity

Training and certification allowances

Work-from-home

Résumé du poste

Placements24 is seeking an experienced Information Security Manager to oversee governance, risk and compliance programs for a fully remote role within South Africa. You will develop, implement and maintain security policies, lead risk assessments and manage audits to ensure regulatory alignment with POPIA, GDPR and ISO 27001.

You will collaborate with legal, IT and business units to drive a cohesive security strategy, deliver awareness training, and report to senior management on program

Qualifications

• Bachelor’s degree in a related field.
• Minimum 7 years in information security focusing on governance, risk and compliance.
• Experience with security frameworks and privacy regulations.

Responsabilités

• Develop and enforce information security policies, standards and procedures.
• Lead risk assessments and vulnerability management programs.
• Oversee audits and remediation activities.
• Deliver security awareness training to all staff.
• Maintain security documentation and incident response plans.
• Collaborate with legal, IT and business units on security strategy.

Connaissances

GRC governance

Policy development

Security leadership

Communication skills

Formation

Bachelors in CS/InfoSec/Law

Outils

ISO 27001

NIST CSF

COBIT

POPIA

GDPR

Description du poste

About the Role

Our client, a global leader in renewable energy solutions, is seeking a dedicated and experienced Information Security Manager to oversee their compliance and governance initiatives. This is a fully remote position, allowing you to work from anywhere within South Africa . You will be responsible for developing, implementing, and maintaining comprehensive information security policies, standards, and procedures that align with regulatory requirements and industry best practices. The role involves conducting risk assessments, managing audits, and ensuring the organization's adherence to data protection laws and frameworks. We are looking for a strategic thinker with a strong understanding of cybersecurity governance and a proven ability to drive compliance programs. This is an excellent opportunity to make a significant impact on the security posture of a forward-thinking company from the comfort of your home office.

Key Responsibilities

• Develop, implement, and enforce information security policies, standards, and procedures.
• Lead and manage information security risk assessments and vulnerability management programs.
• Oversee compliance with relevant regulations and standards (e.g., POPIA, GDPR, ISO 27001).
• Manage internal and external security audits, ensuring timely remediation of findings.
• Develop and deliver security awareness training programs to all employees.
• Act as the primary point of contact for all information security compliance matters.
• Monitor the threat landscape and advise on potential risks and mitigation strategies.
• Collaborate with legal, IT, and business units to ensure a cohesive security strategy.
• Maintain security documentation, including policies, procedures, and incident response plans.
• Report on the effectiveness of the security program to senior management.

Requirements

• Bachelor's degree in Computer Science, Information Security, Law, or a related field.
• Minimum of 7 years of experience in information security, with a strong focus on governance, risk, and compliance (GRC).
• In-depth knowledge of information security frameworks such as ISO 27001, NIST Cybersecurity Framework, and COBIT.
• Experience with data privacy regulations like POPIA and GDPR.
• Proven experience in conducting risk assessments, developing security policies, and managing audits.
• Excellent understanding of cybersecurity principles and technologies.
• Strong project management and leadership skills.
• Exceptional written and verbal communication skills, with the ability to articulate complex security concepts to diverse audiences.
• Relevant certifications such as CISM, CRISC, CISSP, or CGEIT are highly desirable.
• Must be legally authorized to work remotely in South Africa .

Benefits

• This fully remote role offers a highly competitive salary, flexibility in working hours, and the opportunity to shape the security and compliance landscape of a growing international company.
• Our client provides a comprehensive benefits package including private health insurance, a generous retirement annuity, and substantial professional development allowances for training and certifications.
• You will have access to the latest tools and technologies to perform your role effectively.
• This position allows for a true work-from-home experience, eliminating commute times and offering a superb work-life balance.
• Regular virtual team meetings and collaboration tools ensure strong connectivity with colleagues across the globe.
• Our client is committed to fostering a culture of continuous improvement and provides ample opportunities for career advancement within their expanding security team.