Specialist: IT Governance, Risk and Compliance
6 months ago
**Job Advert Summary**:
The purpose of the position is to develop and maintain the information technology (IT) risk and compliance frameworks, policies, processes and procedures through implementation of best practices and approved IT governance framework. The incumbent is also responsible to monitor compliance to IT security policies and their alignment with the company business objectives, monitor IT disaster recovery plans and execution and their alignment with company business continuity plans and work with risk management and internal audit units to monitor IT internal control system.
**Minimum Requirements**:
GENERAL REQUIREMENTS
Minimum requirement
This position requires a minimum Degree/diploma (NQF 7) in Information Technology/Information Systems or Computer Science PLUS the following certifications:
CISA, CISM, CRISC, CGEIT or CISSP
COBIT Training
Added advantage:
Any post graduate qualification in IT, compliance or Internal/External Audit or risk management will be an advantage.
Minimum 5 years’ experience in IT auditing or ICT governance, risk and compliance in a medium to large organisation, with 3 years managing IT audit teams and working with COBIT 19 processes.
: TECHNICAL COMPETENCIES
IT governance
Reviews information systems for compliance with legislation and specifies any required changes.
Responsible for ensuring compliance with organisational policies and procedures and overall information management strategy.
Implements the governance framework to enable governance activity to be conducted.
Within a defined area of accountability, determines the requirements for appropriate governance reflecting the organisation’s values, ethics and wider governance frameworks.
Communicates delegated authority, benefits, opportunities, costs, and risks.
Assists in reviews of governance practices with appropriate and sufficient independence from management activity.
IT risk management
The planning and implementation of organisation-wide processes and procedures for the management of IT risk to the success or integrity of the business, especially those arising from the use of information technology, inappropriate disposal of IT materials, hardware or data.
Carries out risk management activities within a specific function, technical area or project of medium complexity.
Identifies risks and vulnerabilities, assesses their impact and probability, develops mitigation strategies and reports to the business.
Involves specialists and domain experts as necessary.
Information assurance
The leadership and oversight of information assurance, setting high level strategy and policy, to ensure stakeholder confidence that risk to the integrity of information in storage and transit is managed pragmatically, appropriately and in a cost-effective manner.
Performs technical assessments and/or accreditation of complex or higher-risk information systems.
Identifies risk mitigation measures required in addition to the standard organisation or domain
measures.
Establishes the requirement for accreditation evidence from delivery partners and communicates accreditation requirements to stakeholders.
Contributes to planning and organisation of information assurance and accreditation activities.
Contributes to development of and implementation of information assurance processes.
Information security governance
The management of, and provision of expert advice on, the selection, design, justification, implementation and operation of information security controls and management strategies to maintain the confidentiality, integrity, availability, accountability and relevant compliance of information systems with legislation, regulation and relevant standards.
Explains the purpose of security controls and performs security risk and business impact analysis for medium complexity information systems.
Identifies risks that arise from potential technical solution architectures.
Designs alternate solutions or countermeasures and ensures they mitigate identified risks.
Investigates suspected attacks and supports security incident management.
**Duties and Responsibilities**:
KEY PERFORMANCE AREAS (KPA’s)
Strategic Function
Contribute to the development of IT Risk and compliance frameworks and strategies for company.
Support the implementation of the centre Balance Score Card (BSC) initiatives.
Product Management
IT governance and risk management:
Provide support to the senior leadership team on the service portfolio and governance requirements.
Assess ICT general controls by conducting reviews on various aspects of information security, data privacy and business continuity.
Develop and implement a mitigation plan for ICT general control gaps identified during periodic assessments.
Interpret ICT policies and contribute to development of procedures, standards and guidelines that comply with these.
Develop and maintain a risk register that includes ICT operational, business and strategic risks.
Assess the impact and lik
-
Specialist: IT Governance, Risk and Compliance
6 months ago
Pretoria, South Africa Professional Sourcing Full time**Job Overview**: **Specialist: IT Governance, Risk and Compliance Specialist (24-Month Fixed-Term Contract)** - The position is limited to previously disadvantaged groups due to BBBEE requirements._ - _ **Location: Pretoria, Gauteng** There is a newly created job opportunity available at a **highly recognised financial institution** for a **Specialist: IT...
-
Specialist: Governance, Risk
5 months ago
Pretoria, South Africa South African Bank Note Company Full time**Purpose** To provide specialist governance, risk and compliance (GRC) related management support and advisory services to management across the SABN, whilst maintaining the approved GRC methodologies as aligned to the risk and compliance management frameworks. Develop and maintain ethical practices, business continuity planning, records management, to...
-
Manager: Ict Governance, Risk and Compliance
5 months ago
Pretoria, South Africa Secondments Recruitment Full time**Job Advert Summary**: To provide leadership, plan, and manage a large Information and Communication Technology (ICT) Division with regards to ICT Governance, ICT risks and Compliance risks using best industry practices and standards, identify non-conformance and ensure remediation, mitigation and/or positive acceptance of risk. Ensure compliance of all ICT...
-
Specialist: Ict Governance Risk and Compliance
5 months ago
Pretoria, South Africa SABS Full time**Job Advert Summary**: **About SABS** The South African Bureau of Standards (SABS) is mandated to develop, promote and maintain South African National Standards (SANS); promote quality in connection with commodities, products and services; and render conformity assessment services and assist in matters connected therewith. Working for the SABS opens the...
-
Governance, Risk and Compliance Officer
3 weeks ago
Pretoria, South Africa Health Informations Systems Program Full time**Vacancies: Health Information Systems Program South Africa NPC (2003/005786/08)** **Location***:Hybrid in South Africa **Start Date **:As soon as possible **About HISP-SA** HISP-SA provides a wide range of digital health solutions including clinical decision support, laboratory systems, mobile health and data management. Our comprehensive suite of...
-
Corporate Governance Specialist
4 weeks ago
Pretoria, Gauteng, South Africa IT Ridge Technologies Full timeJob Title: Corporate Governance SpecialistCompany: IT Ridge TechnologiesAbout the Role:The Corporate Governance Specialist will work closely with the Corporation's Board of Directors, its CEO, and Executives, providing information on board best practices and tailoring the board's governance framework to fit the needs of the Corporation and the expectations...
-
Compliance and Risk Specialist
1 month ago
Pretoria, Gauteng, South Africa Dante Personnel Full timeJob Title: Compliance and Risk SpecialistWe are seeking a highly skilled Compliance and Risk Specialist to join our team at Dante Personnel. The successful candidate will be responsible for ensuring compliance with regulatory requirements and identifying potential risks to our business.Key Responsibilities:Ensure compliance with regulatory requirements and...
-
Specialist - IT Security Governance
5 months ago
Pretoria, South Africa Professional Sourcing Full time**Job Overview**: A highly reputable and national assurance concern located in Pretoria East requires the expertise of a **Specialist - IT Security Governance** for a permanent role at the head office of the organization. **Position Overview**: The purpose of this position is **_to develop and maintain the Information Technology (IT) security governance...
-
IT Governance, Risk and Compliance Control
5 months ago
Pretoria, South Africa South African Reserve Bank Full timeThe main purpose of this position is to develop and drive the implementation of information and technology (IT) governance frameworks, standards and processes, continually improve the maturity of IT governance at the South African Reserve Bank (SARB) and to ensure alignment to enterprise governance and the relevant legislative/regulatory...
-
Manager: Governance, Compliance and Ethics
6 months ago
Pretoria, South Africa Fempower Personnel Full time**Purpose of the role**: To lead the Bank’s Compliance function by providing strategic direction and focus and by establishing and promoting a compliance culture within the Bank. To ensure that the Bank complies with all relevant statutory, regulatory and supervisory requirements that pertain to its particular industry as well as professional standards,...
-
Head of Governance and Risk
4 weeks ago
Pretoria, South Africa Jobted ZA C2 Full timeOur client is seeking a Head of Governance and Risk (GR) to drive a comprehensive Governance, Risk, and Compliance (GRC) strategy, ensuring the organisation operates within robust legal and regulatory frameworks. This is a high-impact role for an experienced leader with a vision for strategic risk management and operational excellence. Key...
-
Compliance Risk Management Specialist
4 weeks ago
Pretoria, Gauteng, South Africa Masthead Ltd Full timeJob Title: Compliance Risk Management SpecialistMasthead Ltd is seeking a highly skilled Compliance Risk Management Specialist to join our team. As a Compliance Risk Management Specialist, you will be responsible for delivering high-quality compliance and risk management services to our clients.Key Responsibilities:Provide clients with high-quality,...
-
Corporate Governance and Compliance Specialist
2 weeks ago
Pretoria, Gauteng, South Africa Qetello Holdings Full timeAbout Qetello HoldingsWe are seeking an experienced Legal and Corporate Governance Manager to join our team on a permanent basis. The successful candidate will provide comprehensive legal support and advisory services.Key Responsibilities:Manage the compliance program and review all legal and compliance issues within the company.Assist with risk management,...
-
Senior Specialist
5 months ago
Pretoria, South Africa Vivo Group Full time**SENIOR SPECIALIST - POLICY, COMPLIANCE AND RISK MANAGEMENT** **Policy, Compliance and Risk Management (40%)** - Develop and implement the risk management policy, strategy, and Business continuity management policy in line with the PSETA overall strategy and relevant legislation. - Develop, manage and review risk registers on a quarterly basis to mitigate...
-
Compliance Risk Management Specialist
4 weeks ago
Pretoria, Gauteng, South Africa Catch Recruit Full timeJob Title: Compliance Risk Management SpecialistJob Summary:We are seeking a highly skilled Compliance Risk Management Specialist to join our team at Catch Recruit. The successful candidate will be responsible for creating and updating compliance risk management plans, monitoring compliance, and implementing a regulatory compliance management framework...
-
Compliance Manager
1 week ago
Pretoria, Gauteng, South Africa HR Genie Full timeJob DescriptionWe are seeking a skilled Compliance Manager to join our team at HR Genie. This role is based in South Africa, with options to work from Bellville, Bloemfontein, or Pretoria.Key Responsibilities:Risk ManagementDevelop and implement a compliance coverage plan aligned with regulatory requirements;Implement necessary actions to ensure achievement...
-
Ict Risk and Compliance Officer
6 months ago
Pretoria, South Africa Nambiti Technologies Full timeWe are recruiting for an ICT Risk and Compliance Officer Provide guidance, feedback, and support across ICT regarding identification of risk, risk mitigation and management. - Create appropriate metrics to quantify, track and report on identified risk across ICT. - Provide analysis and assessments for risks associated with relevant ICT projects...
-
Head of Governance and Risk
1 month ago
Pretoria, South Africa AFRIZAN Full timeOur client is seeking a Head of Governance and Risk (GR) to drive a comprehensive Governance, Risk, and Compliance (GRC) strategy, ensuring the organisation operates within robust legal and regulatory frameworks. This is a high-impact role for an experienced leader with a vision for strategic risk management and operational excellence. Key...
-
Head of Governance and Risk
1 month ago
Pretoria, South Africa AFRIZAN Full timeOur client is seeking a Head of Governance and Risk (GR) to drive a comprehensive Governance, Risk, and Compliance (GRC) strategy, ensuring the organisation operates within robust legal and regulatory frameworks. This is a high-impact role for an experienced leader with a vision for strategic risk management and operational excellence. Key...
-
Head of Governance and Risk
1 month ago
Pretoria, South Africa AFRIZAN Full timeOur client is seeking a Head of Governance and Risk (GR) to drive a comprehensive Governance, Risk, and Compliance (GRC) strategy, ensuring the organisation operates within robust legal and regulatory frameworks. This is a high-impact role for an experienced leader with a vision for strategic risk management and operational excellence. Key...