Senior GRC & InfoSec Lead: Risk, Compliance, Policy

Placements24; Centurion; Hybrid; ZAR 1,200,000 - 2,000,000; Full time

Benefits offered by this job

Competitive executive bonus structure

Comprehensive healthcare coverage

Generous annual leave and executive-le

Job summary

Placements24 client, a leading financial services institution in Centurion, Gauteng, seeks a senior Information Security Manager to lead the GRC function. You will develop and oversee information security policies, risk management, and regulatory compliance to protect sensitive data and systems.

You will manage a GRC team, coordinate audits, be the security voice with stakeholders at all levels, implement ISO 27001/NIST CSF aligned controls, and drive awareness and improvement across the

Qualifications

• Master's degree in Information Security, Cybersecurity, Law, Business Administration, or a related field.
• Minimum of 7 years of experience in information security, with at least 4 years in a GRC leadership role.
• Proven experience in developing and managing comprehensive GRC programs.
• In-depth knowledge of information security frameworks (ISO 27001, NIST CSF) and regulatory requirements.
• Strong understanding of risk management methodologies and practices.
• Experience with security audit processes and compliance management.
• Excellent leadership, communication, and interpersonal skills.
• Ability to effectively manage stakeholders at all levels of the organization.
• Relevant certifications such as CISSP, CISM, CISA, CRISC are highly desirable.

Responsibilities

• Develop, implement, and maintain the organization's information security GRC program, including policies, standards, and procedures.
• Oversee risk assessments, identify security vulnerabilities, and develop mitigation strategies.
• Ensure compliance with relevant national and international regulations (e.g., POPIA, GDPR, SOX, PCI DSS).
• Manage security audits, both internal and external, and ensure timely remediation of findings.
• Develop and deliver security awareness training programs for employees across the organization.
• Lead and mentor the GRC team, fostering a culture of high performance and continuous improvement.
• Manage third-party risk assessments and ensure vendor compliance with security requirements.
• Develop and maintain the incident response plan and lead the coordination of incident management activities.
• Stay current with emerging security threats, vulnerabilities, and regulatory changes.
• Report on the state of information security risk and compliance to senior management and relevant committees.

Skills

GRC leadership

Information security

Stakeholder management

Risk assessment

Regulatory compliance

Policy development

Cybersecurity certifications (CISSP/C○

Education

Master's degree in Information Security or related field

Advanced regulatory/compliance knowledge

Tools

ISO 27001

NIST CSF

Job description

Placements24 client, a leading financial services institution in Centurion, Gauteng, seeks a senior Information Security Manager to lead the GRC function. You will develop and oversee information security policies, risk management, and regulatory compliance to protect sensitive data and systems.

You will manage a GRC team, coordinate audits, be the security voice with stakeholders at all levels, implement ISO 27001/NIST CSF aligned controls, and drive awareness and improvement across the