Senior Information Security Manager - Governance, Risk & Compliance

Placements24; Stellenbosch; On-site; ZAR 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Premium medical aid

Retirement annuities

Life insurance

Funding for certifications

Leadership training

Job summary

Placements24 is seeking a Senior Information Security Manager to lead the GRC function in Paarl, Western Cape. You will shape risk strategy, develop policies, and drive compliance with POPIA, GDPR, ISO 27001 and King IV, partnering with legal, audit, and business units.

This executive role calls for 8+ years in information security, with 4+ years in leadership. You will report to senior management, manage audits, incident response, business continuity, and vendor relationships, and mentor the

Qualifications

• Master's degree in Information Security, Computer Science, Law, or a related field.
• Advanced certifications such as CISM, CISSP, CGEIT, CRISC are mandatory.
• 8+ years of experience in information security with 4+ years in a GRC leadership role.
• Proven experience building and implementing large-scale GRC programs.
• Deep understanding of risk management, ISO 27001, and compliance.
• Experience developing security policies, standards, and procedures.
• Knowledge of incident response, business continuity, and disaster recovery.
• Strong leadership, communication, negotiation and stakeholder management.
• Ability to influence and drive change across an organization.
• Experience managing security audits and interacting with regulatory bodies.
• Strategic thinker with strong analytical and problem-solving skills.

Responsibilities

• Develop, implement, and manage the organization's Information Security GRC program.
• Oversee risk assessment processes, identify key risks, and mitigate.
• Ensure compliance with POPIA, GDPR, ISO 27001, King IV.
• Develop and maintain information security policies, standards, procedures.
• Lead internal and external security audits and manage remediation.
• Manage the incident response program, including policy development and training.
• Promote security awareness and provide training to employees.
• Collaborate with legal, audit, and business units for cohesive security.
• Stay informed on threats, vulnerabilities, and regulatory changes.
• Manage relationships with third-party security service providers and vendors.
• Provide strategic direction and leadership to the GRC team.
• Report on the effectiveness of the GRC program to senior management and board.

Skills

8+ years information security

GRC leadership experience

GRC program development

risk management knowledge

incident response knowledge

business continuity planning

stakeholder management

audits & regulatory liaison

analytical & problem solving

Education

Master's degree in Information Security, Computer Science, Law, or related field

Tools

ISO 27001 knowledge

POPIA & GDPR familiarity

Job description

About the Role

Our client, a renowned South African enterprise, is seeking a seasoned Senior Information Security Manager to lead its Governance, Risk, and Compliance (GRC) function. Based in the picturesque town of Paarl, Western Cape , this leadership role is critical in establishing and maintaining a robust security posture that aligns with business objectives and regulatory mandates. You will be responsible for developing and implementing comprehensive GRC strategies, managing security risks, and ensuring compliance with all relevant laws and standards. The ideal candidate possesses strong leadership capabilities, a deep understanding of GRC principles, and a proven ability to drive security initiatives within a complex organization. This is a strategic opportunity to make a significant impact.

Key Responsibilities

• Develop, implement, and manage the organization's Information Security GRC program.
• Oversee risk assessment processes, identify key security risks, and develop mitigation strategies.
• Ensure compliance with relevant legal, regulatory, and industry standards (e.g., POPIA, GDPR, ISO 27001, King IV).
• Develop and maintain information security policies, standards, procedures, and guidelines.
• Lead internal and external security audits, and manage remediation efforts.
• Manage the incident response program, including policy development, training, and post-incident reviews.
• Promote security awareness and provide training to employees across the organization.
• Collaborate with legal, audit, and business units to ensure a cohesive security approach.
• Stay abreast of evolving threats, vulnerabilities, and regulatory changes impacting information security.
• Manage relationships with third-party security service providers and vendors.
• Provide strategic direction and leadership to the GRC team.
• Report on the effectiveness of the GRC program to senior management and the board.

Requirements

• Master's degree in Information Security, Computer Science, Law, or a related field.
• Advanced certifications such as CISM, CISSP, CGEIT, CRISC are mandatory.
• Minimum of 8 years of experience in information security, with at least 4 years in a leadership role focused on GRC.
• Proven experience in developing and implementing comprehensive GRC programs in large organizations.
• Deep understanding of risk management frameworks, security standards (ISO 27001), and compliance regulations.
• Expertise in developing security policies, standards, and procedures.
• Strong knowledge of incident response, business continuity, and disaster recovery principles.
• Excellent leadership, communication, negotiation, and stakeholder management skills.
• Demonstrated ability to influence and drive change across an organization.
• Experience in managing security audits and working with regulatory bodies.
• Strategic thinker with strong analytical and problem-solving capabilities.

Benefits

• Our client offers an executive-level salary package with performance-based incentives and comprehensive benefits, including premium medical aid, retirement annuities, and life insurance. We provide substantial opportunities for professional development, including funding for advanced certifications and leadership training.

The role is based at our corporate headquarters in Paarl, Western Cape , offering a stimulating and professional work environment. This is a key leadership position with significant strategic influence and the opportunity to shape the future of information security within the organization. We are committed to fostering a sustainable work-life balance for our senior management team.