IT Security Governance and Policy Specialist at Sasso Consulting
Sasso Consulting · Johannesburg, Gauteng
Overview
Sasso Consulting is looking for experienced IT Security Governance and Policy Specialists in Johannesburg to build and maintain security policies, governance frameworks and compliance processes in a complex enterprise environment. You will work with ISO 27001, NIST, COBIT and POPIA while supporting audits and risk assessments. There are 5 positions available, so this is a great chance for cybersecurity GRC professionals to grow their career.
About the role
Sasso Consulting is hiring 5 IT Security Governance and Policy Specialists to join their team in Johannesburg on a permanent, full time basis. This role sits within a complex enterprise IT environment where you will be responsible for shaping and maintaining the organisation's information security policies, governance frameworks and compliance processes.
You will work closely with IT, cybersecurity, risk and compliance teams to make sure security practices line up with business goals, regulatory requirements and recognised cybersecurity standards. The role also involves conducting risk assessments, supporting audits and preparing governance reports for management.
Important application note: Employment terms and benefits will be confirmed during the recruitment process.
Requirements
- Relevant degree or diploma in IT, Information Security, Cybersecurity, Risk Management or a related field
- Minimum 3 to 5 years of experience in IT security governance, risk management or cybersecurity GRC
- Proven experience developing and implementing information security policies
- Strong practical knowledge of ISO 27001, NIST, COBIT and POPIA
- Experience in security risk assessments, compliance monitoring and IT audits
- Understanding of Information Security Management Systems (ISMS)
- Experience with ServiceNow GRC, RSA Archer, OneTrust or similar platforms advantageous
- CISM, CISA, CISSP, CRISC or ISO 27001 certification advantageous
- Excellent analytical, documentation and stakeholder engagement skills
Responsibilities
- Develop, review and maintain information security policies, standards and procedures
- Implement and improve IT security governance frameworks and controls
- Conduct security risk assessments and maintain risk registers
- Ensure compliance with ISO 27001, NIST, COBIT and POPIA
- Identify security governance gaps and recommend corrective actions
- Support internal and external security audits and compliance assessments
- Monitor audit findings, remediation plans and security control effectiveness
- Conduct third party security risk assessments
- Prepare governance, risk and compliance reports for management
- Collaborate with IT, cybersecurity, risk and compliance teams
Job details
- Organisation
- Sasso Consulting
- Location
- Johannesburg, Gauteng
- Job type
- Full time
- Experience level
- Mid (3+ years)
- Education
- Diploma
- Category
- Safety & Security
- Application Method
- Apply manually
Success Guide
This role is a solid fit if you already have a few years of hands on experience in cybersecurity governance, risk and compliance. When you apply, go beyond just listing your qualifications. Show clearly on your CV how you have worked with ISO 27001, NIST, COBIT or POPIA in real projects, whether that was writing policies, running risk assessments, or helping with audits. If you have certifications like CISM, CISA, CISSP or CRISC, make them easy to spot. Even if you do not have the certificate yet but you have the practical experience, highlight that. Sasso Consulting is filling 5 positions, so there is a real opportunity here. Tailor your CV to speak directly to governance and policy work rather than general IT security, and be ready to talk about how you engage with different teams in an interview.
How we help you prepare
This employer takes applications on their own website, so you'll submit this one yourself — but SPAAN NOW gets everything ready for you first. Here's how it works:
- Our AI tailors your CV to match this job's keywords and requirements, so it stands out to recruiters and screening systems.
- A custom cover letter is written specifically for this role — no generic templates.
- We gather the documents this job needs: CV. SPAAN NOW pulls these from your profile and packages them together, ready to attach.
- Once your application is prepared, we show you exactly how and where to apply — just follow the link to the employer and submit your ready-made CV, cover letter and documents.
- Mark it as applied under Applications to keep track, and if you're shortlisted, use AI Interview Prep to practise questions commonly asked for roles like this.
We do the hard part — tailoring and gathering everything — so applying yourself only takes a minute.
Spaan Talk
1 job seeker is in this Circle