Senior Information Security Manager - Governance, Risk & Compliance

Placements24; Paarl; On-site; ZAR 1,000,000 - 1,500,000; Full time

Benefits offered by this job

Executive compensation package

Medical aid & retirement benefits

Support for advanced certifications

Paarl HQ location

Job summary

Placements24 in Paarl, Western Cape, seeks a Senior Information Security Manager to lead the GRC function. You will shape security strategy, oversee risk management, and ensure compliance with laws and standards, including POPIA, GDPR, ISO 27001, and King IV.

This is a strategic leadership role with significant influence over information security posture in a large organization. The role requires a Master's degree in a related field and advanced certifications (CISM, CISSP, CGEIT, CRISC).

Qualifications

• Master's degree in Information Security, CS, Law, or related field.
• CISM, CISSP, CGEIT, CRISC certifications mandatory.
• 8+ years in information security with at least 4 years in a leadership role focused on GRC.
• Experience developing and implementing comprehensive GRC programs in large organizations.
• Deep understanding of ISO 27001 and risk management frameworks; regulatory knowledge.
• Strong leadership, communication, negotiation, and stakeholder management.

Responsibilities

• Develop, implement, and manage the organization's Information Security GRC program.
• Oversee risk assessment processes, identify key security risks, and develop mitigation strategies.
• Ensure compliance with relevant laws, regulatory, and industry standards (POPIA, GDPR, ISO 27001, King IV).
• Develop and maintain information security policies, standards, procedures, and guidelines.
• Lead internal and external security audits, and manage remediation efforts.
• Manage the incident response program, including policy development, training, and post-incident reviews.
• Promote security awareness and provide training to employees across the organization.
• Collaborate with legal, audit, and business units to ensure a cohesive security approach.
• Stay abreast of evolving threats, vulnerabilities, and regulatory changes impacting information security.
• Manage relationships with third-party security service providers and vendors.
• Provide strategic direction and leadership to the GRC team.
• Report on the effectiveness of the GRC program to senior management and the board.

Skills

Leadership

GRC expertise

Regulatory knowledge

Risk management

Stakeholder management

Strategic thinking

Communication

Education

Master's degree in Information Security / related field

CISM, CISSP, CGEIT, CRISC certifications mandatory

Job description

About the Role

Our client, a renowned South African enterprise, is seeking a seasoned Senior Information Security Manager to lead its Governance, Risk, and Compliance (GRC) function. Based in the picturesque town of Paarl, Western Cape , this leadership role is critical in establishing and maintaining a robust security posture that aligns with business objectives and regulatory mandates. You will be responsible for developing and implementing comprehensive GRC strategies, managing security risks, and ensuring compliance with all relevant laws and standards. The ideal candidate possesses strong leadership capabilities, a deep understanding of GRC principles, and a proven ability to drive security initiatives within a complex organization. This is a strategic opportunity to make a significant impact.

Key Responsibilities

• Develop, implement, and manage the organization's Information Security GRC program.
• Oversee risk assessment processes, identify key security risks, and develop mitigation strategies.
• Ensure compliance with relevant legal, regulatory, and industry standards (e.g., POPIA, GDPR, ISO 27001, King IV).
• Develop and maintain information security policies, standards, procedures, and guidelines.
• Lead internal and external security audits, and manage remediation efforts.
• Manage the incident response program, including policy development, training, and post-incident reviews.
• Promote security awareness and provide training to employees across the organization.
• Collaborate with legal, audit, and business units to ensure a cohesive security approach.
• Stay abreast of evolving threats, vulnerabilities, and regulatory changes impacting information security.
• Manage relationships with third-party security service providers and vendors.
• Provide strategic direction and leadership to the GRC team.
• Report on the effectiveness of the GRC program to senior management and the board.

Requirements

• Master's degree in Information Security, Computer Science, Law, or a related field.
• Advanced certifications such as CISM, CISSP, CGEIT, CRISC are mandatory.
• Minimum of 8 years of experience in information security, with at least 4 years in a leadership role focused on GRC.
• Proven experience in developing and implementing comprehensive GRC programs in large organizations.
• Deep understanding of risk management frameworks, security standards (ISO 27001), and compliance regulations.
• Expertise in developing security policies, standards, and procedures.
• Strong knowledge of incident response, business continuity, and disaster recovery principles.
• Excellent leadership, communication, negotiation, and stakeholder management skills.
• Demonstrated ability to influence and drive change across an organization.
• Experience in managing security audits and working with regulatory bodies.
• Strategic thinker with strong analytical and problem-solving capabilities.

Benefits

• Our client offers an executive-level salary package with performance-based incentives and comprehensive benefits, including premium medical aid, retirement annuities, and life insurance.
• We provide substantial opportunities for professional development, including funding for advanced certifications and leadership training.
• The role is based at our corporate headquarters in Paarl, Western Cape , offering a stimulating and professional work environment.
• This is a key leadership position with significant strategic influence and the opportunity to shape the future of information security within the organization.
• We are committed to fostering a sustainable work-life balance for our senior management team.