Security Governance & Risk Manager (Compliance)

Top Vitae; Oos-Kaap; On-site; ZAR 900,000 - 1,200,000; Full time

Job summary

Top Vitae is seeking an IT Security Manager to lead governance, risk management, compliance, and security assurance across the organization. You will partner with business and technology teams to embed security requirements in processes.

The role covers policy development, risk tracking, audits, and security awareness programs. You will coordinate third-party security reviews, report on program effectiveness, and act as a central point for governance, risk, and compliance.

Qualifications

• 5+ years of experience in information security, cybersecurity, risk management, governance, compliance, or related fields.
• Strong understanding of information security principles and governance practices.
• Experience coordinating audits, findings, and remediation activities.
• Ability to develop and maintain information security policies and awareness programs.
• Strong written and verbal communication skills and stakeholder influence.

Responsibilities

• Lead information security governance across the organization.
• Identify, assess, treat, and monitor information security risks.
• Coordinate internal and external audits and ensure remediation tracking.
• Develop security awareness and training programs for employees.
• Review vendor security and manage third-party risk.
• Support planning and execution of security initiatives and reporting.

Skills

Governance

Risk management

Policy development

Stakeholder mgmt

Audit coordination

Security training

Communication

Education

Bachelor's degree in Information Security or related field

Certifications: CISSP, CISM, CRISC, CGRC, ISO 27001 Lead Implementer

Job description

Top Vitae is seeking an IT Security Manager to lead governance, risk management, compliance, and security assurance across the organization. You will partner with business and technology teams to embed security requirements in processes.

The role covers policy development, risk tracking, audits, and security awareness programs. You will coordinate third-party security reviews, report on program effectiveness, and act as a central point for governance, risk, and compliance.