Senior GRC (Governance, Risk, and Compliance) Consultant

Different Technologies Pty Ltd.; Gauteng; On-site; ZAR 300,000 - 400,000; Full time

Job summary

A leading company in IT consulting seeks a Senior GRC Consultant for a 12-month contract in Johannesburg. This role involves managing governance frameworks, risk assessments, and ensuring compliance with data protection regulations. Ideal candidates will possess a bachelor's degree in relevant fields alongside key certifications in risk and information security.

Qualifications

• Bachelor's degree in Information Systems, Computer Science or related.
• Professional certifications: CISA, CISM, CRISC preferred.
• Postgraduate qualifications advantageous.

Responsibilities

• Consult on governance, risk, and compliance matters.
• Align cybersecurity programs with business goals.
• Ensure audit readiness and compliance with regulations.

Skills

Governance

Risk Management

Compliance

Cybersecurity

Education

Bachelor’s degree in Information Systems

Postgraduate qualification in Information Security

Tools

ISO/IEC 27001

Job description

We are currently looking for a Senior GRC (Governance, Risk, and Compliance) Consultant

12x Month Contract I 1x day Onsite per week I Johannesburg

Experience:

• Bachelor’s degree in Information Systems, Computer Science, Cybersecurity, or a related technical or business discipline.
• Postgraduate qualification (e.g., Honours or Master’s degree in Information Security, IT Governance, or Risk Management) is advantageous and preferred for strategic and senior-level roles.
• Professional certifications in risk, compliance, identity governance, and information security, including at least one or more of the following:
• Certified Information Systems Auditor (CISA) – for audit, controls, and risk governance
• Certified Information Security Manager (CISM) – for managing and aligning cybersecurity programs to business goals
• Certified in Risk and Information Systems Control (CRISC) – for enterprise risk management and control monitoring
• ISO/IEC 27001 Lead Implementer or Lead Auditor – for governance frameworks and audit readiness
• Certified Data Privacy Solutions Engineer (CDPSE) – advantageous for aligning access and compliance with data protection regulations (POPIA, GDPR)