Information Security Governance, Risk

2 days ago

Polokwane, Limpopo, South Africa Placements24 Full-time R 600,000 - R 900,000 Contract

About the Role

Our client, a prominent player in the telecommunications sector, is seeking an Information Security GRC Analyst to join their team in Polokwane. This hybrid role provides a great opportunity to contribute to the security and compliance efforts of the organization, offering a mix of on-site engagement and remote flexibility. You will be responsible for developing, implementing, and maintaining the company's information security GRC program. This includes ensuring compliance with regulatory requirements, conducting risk assessments, managing security policies, and supporting internal and external audits. The ideal candidate will have a strong understanding of GRC frameworks, risk management principles, and cybersecurity best practices. This role requires excellent analytical, communication, and documentation skills to effectively collaborate with various stakeholders across the business. Join us in Polokwane and play a vital role in strengthening our security and compliance posture.

Key Responsibilities

  • Develop, implement, and manage the information security GRC program.
  • Ensure compliance with relevant industry regulations and standards (e.g., POPIA, GDPR if applicable, ISO 27001).
  • Conduct information security risk assessments and maintain a risk register.
  • Develop, review, and update information security policies, standards, and procedures.
  • Manage and coordinate internal and external security audits.
  • Respond to regulatory inquiries and facilitate compliance reporting.
  • Promote security awareness and provide training on GRC matters.
  • Monitor regulatory changes and update the GRC program accordingly.

Requirements

  • Bachelor's degree in Information Technology, Computer Science, Law, or a related field.
  • Minimum of 4 years of experience in information security, focusing on GRC functions.
  • In-depth knowledge of GRC frameworks such as ISO 27001, NIST, COBIT.
  • Experience with risk assessment methodologies and compliance management.
  • Familiarity with data privacy regulations.
  • Strong understanding of information security principles and controls.
  • Excellent written and verbal communication skills, with strong report-writing capabilities.
  • Relevant certifications like CISA, CRISC, CISSP, or CISM are highly desirable.

Benefits

  • Our client offers a competitive salary, medical aid, retirement fund, professional development opportunities, and a flexible hybrid work arrangement in Polokwane.