Senior GRC Leader - Information Security

Placements24; Stellenbosch; On-site; ZAR 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Premium medical aid

Retirement annuities

Life insurance

Funding for certifications

Leadership training

Job summary

Placements24 is seeking a Senior Information Security Manager to lead the GRC function in Paarl, Western Cape. You will shape risk strategy, develop policies, and drive compliance with POPIA, GDPR, ISO 27001 and King IV, partnering with legal, audit, and business units.

This executive role calls for 8+ years in information security, with 4+ years in leadership. You will report to senior management, manage audits, incident response, business continuity, and vendor relationships, and mentor the

Qualifications

• Master's degree in Information Security, Computer Science, Law, or a related field.
• Advanced certifications such as CISM, CISSP, CGEIT, CRISC are mandatory.
• 8+ years of experience in information security with 4+ years in a GRC leadership role.
• Proven experience building and implementing large-scale GRC programs.
• Deep understanding of risk management, ISO 27001, and compliance.
• Experience developing security policies, standards, and procedures.
• Knowledge of incident response, business continuity, and disaster recovery.
• Strong leadership, communication, negotiation and stakeholder management.
• Ability to influence and drive change across an organization.
• Experience managing security audits and interacting with regulatory bodies.
• Strategic thinker with strong analytical and problem-solving skills.

Responsibilities

• Develop, implement, and manage the organization's Information Security GRC program.
• Oversee risk assessment processes, identify key risks, and mitigate.
• Ensure compliance with POPIA, GDPR, ISO 27001, King IV.
• Develop and maintain information security policies, standards, procedures.
• Lead internal and external security audits and manage remediation.
• Manage the incident response program, including policy development and training.
• Promote security awareness and provide training to employees.
• Collaborate with legal, audit, and business units for cohesive security.
• Stay informed on threats, vulnerabilities, and regulatory changes.
• Manage relationships with third-party security service providers and vendors.
• Provide strategic direction and leadership to the GRC team.
• Report on the effectiveness of the GRC program to senior management and board.

Skills

8+ years information security

GRC leadership experience

GRC program development

risk management knowledge

incident response knowledge

business continuity planning

stakeholder management

audits & regulatory liaison

analytical & problem solving

Education

Master's degree in Information Security, Computer Science, Law, or related field

Tools

ISO 27001 knowledge

POPIA & GDPR familiarity

Job description

Placements24 is seeking a Senior Information Security Manager to lead the GRC function in Paarl, Western Cape. You will shape risk strategy, develop policies, and drive compliance with POPIA, GDPR, ISO 27001 and King IV, partnering with legal, audit, and business units.

This executive role calls for 8+ years in information security, with 4+ years in leadership. You will report to senior management, manage audits, incident response, business continuity, and vendor relationships, and mentor the