Risk, Information Security & Compliance Lead

RAD Resources; Gauteng; On-site; ZAR 1,000,000 - 1,800,000; Full time

Job summary

RAD Resources is seeking a Group Risk, Information Security & Compliance Manager to lead the organisation’s enterprise information security, IT risk, governance, compliance, and assurance functions across the Group. The role focuses on maintaining a robust security posture and ensuring ongoing compliance with ISO standards and PCI DSS.

You will collaborate with executives, auditors, regulators, customers, and external providers to keep operations secure, compliant and audit-ready.

Qualifications

• Bachelor’s degree or higher in a relevant field.
• 5–10 years’ experience in Information Security, Risk, Compliance, Governance, or related fields.
• Experience managing ISO certification environments.
• Strong PCI DSS compliance knowledge and experience.

Responsibilities

• Lead and manage the organisation’s enterprise information security, IT risk, governance, compliance, and assurance functions across the Group.
• Maintain and improve security posture, ensure regulatory/industry standards compliance, and oversee ISO/PCI DSS frameworks.
• Coordinate audits and engage with regulators, customers, auditors, and service providers to ensure audit-ready operations.

Skills

Information Security

IT Risk Management

Compliance

Governance

Audit coordination

Education

Bachelor’s degree in Information Technology, Information Security, Risk Management, Computer Science, or related field

Job description

The Group Risk, Information Security & Compliance Manager is responsible for leading and managing the organisation’s enterprise information security, IT risk, governance, compliance, and assurance functions across the Group.

The role is accountable for maintaining and improving the organisation’s security posture, ensuring compliance with applicable regulatory and industry standards, and overseeing the governance and continuous improvement of frameworks including ISO standards and PCI DSS.

The incumbent will work closely with executive management, operational teams, auditors, regulators, customers, and external service providers to ensure the organisation maintains secure, compliant, resilient, and audit-ready operations across both physical and digital information management environments.

Minimum Qualifications:

• Bachelor’s degree in Information Technology, Information Security, Risk Management, Computer Science, or related field.

Relevant industry certifications such as:

• CISSP
• CISM
• CRISC
• ISO 27001 Lead Implementer or Lead Auditor
• PCI DSS related certifications
• COBIT
• ITIL

Experience Required:

• Minimum 5 - 10 years’ experience in Information Security, Risk, Compliance, Governance, or related fields.
• Experience managing ISO certification environments.
• Strong understanding and practical experience with PCI DSS compliance.

Experience working within highly regulated industries such as:

• Banking
• Healthcare
• Financial Services
• Records Management
• Enterprise Managed Services
• Experience coordinating audits and engaging with enterprise customers.
• Experience managing security governance across multi-site or multi-country environments will be advantageous.