Senior GRC & Information Security Leader

Placements24; Randburg; On-site; ZAR 900,000 - 1,500,000; Full time

Benefits offered by this job

Health insurance

Retirement plan with company match

Generous annual leave

Professional development opportunities

Salary incentives and performancebased

Job summary

Placements24 is seeking a seasoned Information Security Manager to lead the GRC function and develop a comprehensive information security program. The role focuses on governance, risk, and compliance, aligning with regulatory requirements and business objectives.

Based in Randburg, you will drive policy development, audits, and security awareness while mentoring a GRC team. You will oversee risk assessments, vendor risk, and security metrics, ensuring confidentiality, integrity, and availability

Qualifications

• 7+ years in information security with at least 3 in a leadership role focusing on GRC.
• Strong knowledge of ISO 27001 and NIST, risk management, and regulatory compliance.
• Proven track record in policy development and program implementation.
• Experience with GRC tools and third-party risk management.
• CISSP / CISM / CRISC / CISA certifications required.

Responsibilities

• Develop and execute the information security strategy with a GRC focus.
• Identify, assess, and manage information security risks.
• Establish and maintain security policies, standards, procedures.
• Ensure regulatory compliance (POPIA, GDPR, ISO 27001).
• Lead internal and external security audits.
• Oversee security awareness training.
• Direct incident response planning and execution.
• Manage vendor risk assessments and third-party reviews.
• Develop security metrics and reporting.
• Lead and mentor the GRC team.

Skills

Leadership

GRC expertise

Risk management

Policy development

Stakeholder communication

Education

Bachelor's degree

Master's degree

Tools

GRC tools

Job description

Placements24 is seeking a seasoned Information Security Manager to lead the GRC function and develop a comprehensive information security program. The role focuses on governance, risk, and compliance, aligning with regulatory requirements and business objectives.

Based in Randburg, you will drive policy development, audits, and security awareness while mentoring a GRC team. You will oversee risk assessments, vendor risk, and security metrics, ensuring confidentiality, integrity, and availability