Remote Information Security Officer - GRC Specialist

Placements24; Durban; Hybrid; ZAR 1,482,000 - 2,470,000; Full time

Job summary

Placements24 is seeking a remote Information Security Officer specializing in GRC to join a globally distributed team. You will develop, implement, and maintain policies, standards, and procedures ensuring regulatory and industry compliance while advancing the organization’s security posture.

The role requires 6+ years in information security with a GRC focus, experience building governance frameworks, risk assessments, audits, and awareness programs.

Qualifications

• Bachelor's degree in CS/InfoSec/Law or related field.
• 6+ years in Information Security with a strong GRC focus.
• Experience building and implementing security policies and procedures.
• Knowledge of ISO 27001, NIST, COBIT, GDPR, POPIA.
• CISA/CRISC/CISSP/CISM certifications preferred.

Responsibilities

• Develop, implement, and manage information security governance framework.
• Conduct risk assessments and develop mitigation strategies.
• Coordinate internal and external security audits and assessments.
• Maintain information security policies, standards, and guidelines.
• Ensure compliance with GDPR, POPIA, ISO 27001 and other regs.
• Manage third-party risk assessments and vendor security reviews.
• Develop and deliver security awareness training programs.
• Serve as a point of contact for GRC inquiries and initiatives.
• Monitor effectiveness of controls and recommend improvements.
• Stay informed on emerging GRC trends and regulatory changes.

Skills

GRC governance

Risk assessment

Policy development

Audit management

Remote work

Education

Bachelors in CS/IS/Law

Tools

GRC tools

ISO 27001 tooling

Job description

About the Role

Our client is a globally recognized organization seeking a dedicated and experienced Remote Information Security Officer with a strong specialization in Governance, Risk, and Compliance (GRC). This fully remote position is ideal for a self-motivated professional who can work autonomously and contribute significantly to our client's security framework without geographical constraints. You will play a key role in developing, implementing, and maintaining policies, standards, and procedures that ensure compliance with relevant regulations and industry best practices. This role involves conducting risk assessments, managing security audits, and fostering a security-aware culture across the organization. The successful candidate will have a comprehensive understanding of GRC principles, experience with various compliance frameworks, and a proactive approach to identifying and mitigating security risks. Join our client's distributed team and help shape their robust security posture from anywhere in the world.

Key Responsibilities

• Develop, implement, and manage the organization's information security governance framework.
• Conduct comprehensive risk assessments and develop mitigation strategies for identified risks.
• Oversee and coordinate internal and external security audits and assessments.
• Develop and maintain information security policies, standards, and guidelines.
• Ensure compliance with relevant legal, regulatory, and contractual requirements (e.g., GDPR, POPIA, ISO 27001).
• Manage third-party risk assessments and vendor security reviews.
• Develop and deliver information security awareness training programs.
• Serve as a point of contact for GRC-related inquiries and initiatives.
• Monitor the effectiveness of security controls and recommend improvements.
• Stay informed about emerging GRC trends, threats, and regulatory changes.

Requirements

• Bachelor's degree in Computer Science, Information Security, Law, or a related field.
• Minimum of 6 years of experience in Information Security, with a strong focus on GRC.
• Proven experience in developing and implementing information security policies and procedures.
• In-depth knowledge of various compliance frameworks such as ISO 27001, NIST, COBIT, GDPR, and POPIA.
• Experience conducting risk assessments, business impact analyses, and vulnerability management programs.
• Strong understanding of information security principles, controls, and technologies.
• Excellent written and verbal communication skills, with the ability to create clear and concise documentation.
• Ability to work independently and manage multiple projects simultaneously in a remote setting.
• GRC-related certifications such as CISA, CRISC, CISSP, or CISM are highly preferred.
• Experience with GRC tools and platforms is a plus.

Benefits

• Competitive salary commensurate with experience.
• Fully remote work arrangement, offering unparalleled flexibility.
• Opportunity to work with a global organization and diverse teams.
• Professional development and continuous learning opportunities.
• Contribution to a secure and compliant digital environment.
• Access to online training resources and industry conferences.
• Performance-based incentives.
• Work-life balance focus.
• Modern digital collaboration tools.