Governance, Risk & Compliance Specialist

About the role

We are seeking a Governance, Risk & Compliance Specialist to join Truworths, one of South Africa’s leading fashion retailers. The role will work across the organisation to strengthen business continuity, oversee information security, and support governance initiatives that drive resilience and accountability.

Key responsibilities

• Lead the review, update and testing of departmental Business Continuity Plans (BCP) and conduct Business Impact Assessments.
• Present quarterly progress reports to the Business Continuity Management Team and senior committees.
• Act as the Information Officer under the POPI Act and serve as Chief Information Security Officer (CISO).
• Manage security improvement projects, including regular penetration testing, Active Directory upgrades, and Identity & Privilege Access Management initiatives.
• Oversee cyber‑insurance renewal and ensure compliance with PCI, insurance and other external assessment requirements.
• Coordinate and deliver information security training programmes across the business.

Required profile

• Relevant qualifications and proven experience in governance, risk, compliance or information security.
• Strong understanding of South African data‑privacy legislation (POPI Act) and industry standards such as PCI DSS.
• Ability to work collaboratively with IT, business units and senior leadership.
• Excellent analytical and communication skills with a focus on continuous improvement.

Required skills

• Penetration testing
• Active Directory administration and migration
• Identity Access Management (IAM) and Privilege Access Management (PAM)
• Cyber‑insurance management
• PCI DSS compliance
• Information security frameworks and policies