Senior InfoSec GRC Leader | Risk, Compliance & Strategy

Placements24; Paarl; On-site; ZAR 1,000,000 - 1,500,000; Full time

Benefits offered by this job

Executive compensation package

Medical aid & retirement benefits

Support for advanced certifications

Paarl HQ location

Job summary

Placements24 in Paarl, Western Cape, seeks a Senior Information Security Manager to lead the GRC function. You will shape security strategy, oversee risk management, and ensure compliance with laws and standards, including POPIA, GDPR, ISO 27001, and King IV.

This is a strategic leadership role with significant influence over information security posture in a large organization. The role requires a Master's degree in a related field and advanced certifications (CISM, CISSP, CGEIT, CRISC).

Qualifications

• Master's degree in Information Security, CS, Law, or related field.
• CISM, CISSP, CGEIT, CRISC certifications mandatory.
• 8+ years in information security with at least 4 years in a leadership role focused on GRC.
• Experience developing and implementing comprehensive GRC programs in large organizations.
• Deep understanding of ISO 27001 and risk management frameworks; regulatory knowledge.
• Strong leadership, communication, negotiation, and stakeholder management.

Responsibilities

• Develop, implement, and manage the organization's Information Security GRC program.
• Oversee risk assessment processes, identify key security risks, and develop mitigation strategies.
• Ensure compliance with relevant laws, regulatory, and industry standards (POPIA, GDPR, ISO 27001, King IV).
• Develop and maintain information security policies, standards, procedures, and guidelines.
• Lead internal and external security audits, and manage remediation efforts.
• Manage the incident response program, including policy development, training, and post-incident reviews.
• Promote security awareness and provide training to employees across the organization.
• Collaborate with legal, audit, and business units to ensure a cohesive security approach.
• Stay abreast of evolving threats, vulnerabilities, and regulatory changes impacting information security.
• Manage relationships with third-party security service providers and vendors.
• Provide strategic direction and leadership to the GRC team.
• Report on the effectiveness of the GRC program to senior management and the board.

Skills

Leadership

GRC expertise

Regulatory knowledge

Risk management

Stakeholder management

Strategic thinking

Communication

Education

Master's degree in Information Security / related field

CISM, CISSP, CGEIT, CRISC certifications mandatory

Job description

Placements24 in Paarl, Western Cape, seeks a Senior Information Security Manager to lead the GRC function. You will shape security strategy, oversee risk management, and ensure compliance with laws and standards, including POPIA, GDPR, ISO 27001, and King IV.

This is a strategic leadership role with significant influence over information security posture in a large organization. The role requires a Master's degree in a related field and advanced certifications (CISM, CISSP, CGEIT, CRISC).