Strategic IT Security Policy Architect

Sasso Consulting (Pty) Ltd; Johannesburg; On-site; ZAR 550,000 - 850,000; Full time

Job summary

Sasso Consulting (Pty) Ltd seeks IT Security Governance and Policy Specialists to drive governance and policy development across complex enterprise IT environments. You will translate security requirements into practical governance controls and contribute to ongoing assurance activities.

Role emphasizes risk management, regulatory compliance (POPIA, ISO 27001, NIST), and collaboration with risk, compliance and business teams to support audits and continuous improvement.

Qualifications

• Minimum requirements include a relevant diploma or degree in Information Technology, Information Systems, Computer Science, Cybersecurity, Risk Management or related discipline.
• Typically 3–5 years of relevant experience in IT security governance, information security risk management, IT compliance or cybersecurity GRC.
• Proven experience developing, implementing or maintaining information security policies and standards.
• Strong understanding of information security governance principles and enterprise risk management.
• Practical experience with ISO/IEC 27001, NIST or COBIT frameworks.
• Familiarity with POPIA and other SA regulatory requirements; risk registers and compliance reporting.

Responsibilities

• Develop, implement, review and maintain information security policies, standards, procedures and governance frameworks.
• Align security policies with regulatory requirements and industry standards.
• Establish governance structures, processes and control frameworks.
• Review policies and recommend improvements to strengthen security.
• Support enterprise information security strategies and reporting requirements.
• Coordinate remediation activities and governance maturity assessments.
• Prepare governance reports and management updates.

Skills

IT governance

Risk management

Regulatory compliance

Policy development

Governance frameworks

Stakeholder engagement

Education

Diploma or degree in IT / Cybersecurity

Tools

ServiceNow GRC

RSA Archer

MetricStream

Purview Compliance Manager

OneTrust

Job description

Sasso Consulting (Pty) Ltd seeks IT Security Governance and Policy Specialists to drive governance and policy development across complex enterprise IT environments. You will translate security requirements into practical governance controls and contribute to ongoing assurance activities.

Role emphasizes risk management, regulatory compliance (POPIA, ISO 27001, NIST), and collaboration with risk, compliance and business teams to support audits and continuous improvement.