Information Security Manager - Compliance & Governance

About the Role

Our client, a prominent financial services institution headquartered in Pretoria, Gauteng , is seeking an experienced Information Security Manager to lead their Compliance and Governance initiatives. This senior role is responsible for ensuring that the organization's information security policies, procedures, and controls align with regulatory requirements, industry best practices, and business objectives. The ideal candidate will have a strong understanding of information security frameworks, risk management, and audit processes. You will play a key role in developing and maintaining the security governance program, conducting risk assessments, and managing security audits. This position offers a strategic leadership opportunity within a well-established organization, adopting a Hybrid work arrangement with regular engagement in our Pretoria office.

Key Responsibilities

• Develop, implement, and maintain the organization's information security policies, standards, and procedures.
• Oversee the information security risk management program, including risk identification, assessment, and mitigation planning.
• Ensure compliance with relevant legal, regulatory, and contractual requirements (e.g., POPIA, FICA, PAIA, industry standards).
• Manage and coordinate internal and external security audits, providing evidence and facilitating auditor requests.
• Develop and manage the information security awareness and training program for all employees.
• Lead the third-party risk management process for information security.
• Establish and monitor key performance indicators (KPIs) and key risk indicators (KRIs) for the information security program.
• Liaise with legal counsel, internal audit, and external regulators on security-related matters.
• Provide guidance and support to business units on information security compliance and best practices.
• Manage and mentor a team of information security professionals focused on compliance and governance.

Requirements

• Bachelor's degree in Information Technology, Computer Science, Law, or a related field.
• A Master's degree or relevant professional certifications are highly desirable.
• Minimum of 7 years of experience in information security, with a significant focus on governance, risk, and compliance (GRC).
• In-depth knowledge of information security frameworks such as ISO 27001/27002, NIST CSF, COBIT, and ITIL.
• Strong understanding of South African data privacy regulations (POPIA) and financial sector regulations.
• Proven experience in conducting risk assessments, security audits, and developing remediation plans.
• Excellent understanding of IT controls, audit principles, and governance best practices.
• Strong leadership, communication, and stakeholder management skills.
• Ability to translate complex technical and regulatory requirements into actionable business strategies.
• Experience with GRC tools is a plus.
• Experience in the financial services industry is highly preferred.

Benefits

Our client provides a competitive salary, comprehensive medical and retirement benefits, performance-driven bonuses, and ample opportunities for professional development and career advancement. You will be part of a respected institution in Pretoria, Gauteng , working in a strategic Hybrid capacity.

#J-18808-Ljbffr