Information, Risk, Security, Governance and

2 days ago

Durban, South Africa Transnet Full time

**_ Equity Statement :Preference will be given to suitably qualified Applicants who are members of the_**
**_designated groups in line with the Employment Equity Plan and Targets of the Organisation/Operating_**
**_Division._**

**_ Alternative Application Methods: (Completed Curriculum Vitae to be submitted)_**

Post:
Fax:
before the closing date of the advertisement.

Note: if you have not been contacted within 30 days of the closing date of this advertisement please consider your

We urge all our employees, clients, members of the public and our suppliers to report any kind of fraud or corruption at

**_ Operating Division : Transnet Pipelines_**

**_ Position Title : Information, Risk, Security, Governance and Compliance Specialist_**

**_ Employee Group : Permanent_**

**_ Department : ICT_**

**_ Location : Durban Central_**

**_ Reporting To : _**

**_Grade Level : G_**

**_ Reference Number : 40001324_**

**_ Position Purpose:_**
- To develop policies, standards and guidelines for IT general controls, IT laws and regulations and IT security.
- Liaise with internal / external audit to recommend and ensure resolution of identified weaknesses in IT controls.
- Ensure implementation of Transnet IT policies, procedures, standards and frame works across the IT landscape.
- Ensure compliance with IT legislation requirements.
- Ensure TPL DRPs and BCPs are in line with business requirements.
- Provide risk identification, assessment, and consulting services to the TPL ICT function.
- Ensure that key IT risks at TPL are appropriately managed and mitigated.
- Research and advice on risks related to new and existing technologies within the IT environment.
- Maintain the TPL risk register within the approved risk management system.

**_Position outputs:_**
- Assist in the development of IT Governance, Risk, Compliance and Security related policies, procedures, standards and

frameworks.
- Ensure compliance to Transnet IT policies, procedures, standards and frameworks incl. ITGC and CFRC.
- Ensure that IT DRP and BCP solutions are in place and in line with business requirements.
- Develop and implement the IT compliance plan.
- Conduct compliance monitoring within the TPL IT environment.
- Conduct information security awareness, IT risk management, IT regulatory universe and compliance user training.
- Conducting, and/or coordinating risk and information security assessment and risk opinion engagements at TPL;
- Interfacing with the key ICT vendors/clients at TPL and ensuring adequate IT risk coverage;
- Serving as a contact point in relation to IT risk matters affecting TPL;
- Tracking and monitoring of Audit Findings, and report on finding resolution status to the relevant bodies. Maintain audit

status on SAP GRC;
- Tracking and monitoring of Risks and report on risk resolution status to the relevant bodies. Maintain risk status on CURA;
- Tracking and monitoring of implementation of Compliance Control Plans, and report on status thereof to the relevant bodies.
- Maintain the TPL IT Minimum Control Framework;
- Interfacing with clients to collect information as required for assessments, concepts and reporting requirements;
- Implementing standard Risk Assessment, and ensure that risks identified are managed in accordance with the defined

Transnet Board risk appetite, and risk tolerance;
- Engaging with IT & the business on controls to be implemented to ensure a secure, controlled and manageable risk

environment;
- Managing the TPL ICT risk register, including reporting and follow-up;
- Ensuring that the business is being kept updated on any new IT risk management developments, such as new

methodologies, policies, tools and/or services;
- Communicating IT risk requirements and best practices to TPL ICT staff, consultants and vendors via presentations, training

programs, memos, websites, and other relevant media;
- Research and report on potential practices relating to the design and implementation of audit, risk assessment and

regulatory compliance practices for ICT;
- Escalate and remediate IT risk and compliance related issues;
- Compile reports on the status of technology risk and compliance issues based on assessment results and information from

various monitoring and control systems;
- Research and advise on appropriate mitigation strategies and approaches which can be applied by TPL ICT;
- Propose solutions to mitigate risks under the established risk management strategies
- Assist in identifying, assessing and managing the regulatory universe that applies to TPL IT.
- Analyze applicable new regulatory developments or requirements with a view of preparing appropriate communications or

responses.
- Provide support regarding audit, regulatory and risk management activities across IT functional areas, such as the

development and maintenance of regulatory documentation (e.g. RICA, ECTA and POPI);
**_ Qualifications & Experience:_**
- National Diploma in Information Technology and Systems with 3 - 5 y

  • Manager: Information Security, Governance, Risk

    1 week ago

    Durban, South Africa Transnet Full time

    **_ Equity Statement :Preference will be given to suitably qualified Applicants who are members of the_** **_designated groups in line with the Employment Equity Plan and Targets of the Organisation/Operating_** **_Division._** **_ Alternative Application Methods: (Completed Curriculum Vitae to be submitted)_** Post: E-mail: Fax: before the closing date of...

  • Senior Manager: Information Security

    4 months ago

    Durban, South Africa Derivco Full time

    Job Profile Summary: **Join us to create the giants in the industry** At Derivco, we believe that our people are not just employees - they are the heart and soul of our business. It's their skills, expertise, and passion that define who we are and drive us towards excellence every day. We empower our people to think creatively, push boundaries, and take...

  • Enterprise IT Information Security

    2 weeks ago

    Durban, South Africa Games Global Full time

    **The role**: In this role you will assist with the implementation and execution of Information Risk, Security, Governance and Compliance tasks at Games Global. The role will be positioned in the Enterprise Information Technology team and will focus on assisting with establishing and ensuring adherence to Games Global information security policies, standards...

  • Information Security Specialist

    7 months ago

    Durban, South Africa Games Global Full time

    The Information Security Specialist will primarily be responsible for line of business Information Security requirements, projects, and various operational activities, but may get involved and assist in companywide projects and initiatives from time to time. The Information Security Specialist will be responsible to assess information security risk in all...

  • Head: IT Governance, Risk

    7 months ago

    Durban, South Africa Games Global Operations Limited Full time

    Overview: The Head of IT Governance Risk and Compliance (GRC) role is responsible for overseeing, managing, and in some cases executing all aspects of IT compliance with a specific focus on Sarbanes-Oxley (SOX) requirements. This role should operate with a high level of cooperation and partnering within IT along with the Game Global teams for Compliance,...

  • Information Security Lead, Africa

    7 months ago

    Durban, South Africa Unilever Full time

    **JOB POSITION: Information Security Lead, Africa** **SCOPE: Africa** **Location: Open** **BUSINESS MAIN JOB PURPOSE** Unilever is one of the world’s leading suppliers of Food, Home, and Personal Care products with sales in over 190 countries and reaching 3.4 billion consumers a day. Unilever has more than 400 brands found in homes around the world,...

  • Ict Governance Specialist

    4 months ago

    Durban, South Africa Africa-One Consulting Full time

    **Responsibilities** - Develop, manage, and enhance the ICT governance framework, road map &processes. - Manage the ICT policies and procedures and frameworks and make sure that they are in compliance and up to date. Conduct annual reviews with the policy/process owners. - Research, recommend, manage, and participate in implementing any required CT...

  • IT Governance Manager

    7 months ago

    Durban, South Africa RCL FOODS Careers Full time

    **Vector Logistics,** a leading supply chain and logistics company headquartered in Durban, South Africa, is on the lookout for an experienced and **IT Governance Manager** **to join our innovative and high-performing team. With a rich history and a commitment to excellence, Vector Logistics is at the forefront of providing cutting-edge solutions to meet the...

  • Internship Opportunity

    3 months ago

    Durban, South Africa GBS Full time

    Are you ready to unleash your knowledge and skill on the engaging world of **Governance, Risk, and Compliance (GRC)**? We are seeking a detail-driven **GRC Intern** who is excited to learn and ready to gain practical experience. In this role, you will document policies and procedures, assess risks, analyse data, and provide insights. Bring your excellent...

  • IT Security Clerk

    2 weeks ago

    Durban, South Africa Armstrong Appointments Full time

    **Our client, one of the largest international Islamic banking groups in the world is looking for a IT Security Clerk to fulfil the bank’s obligations in terms of Information Security as highlighted by internal/external audit as well as regulators in line with corporate governance. To monitor information security systems and event logs, investigation of...

  • IT Security Clerk

    3 days ago

    Durban, South Africa Precision Placements Full time

    **IT SECURITY CLERK** **PURPOSE OF THE JOB** To fulfil the bank’s obligations in terms of Information Security as highlighted by internal/external audit as well as regulators in line with corporate governance. To monitor information security systems and event logs, investigation of events, research security solutions, assist in policy and procedure...

  • Security Supervisor

    3 days ago

    Durban, South Africa Stan Gumede Trading and Security Full time

    We are currently seeking a Grade B Security Supervisor to work a Monday to Friday shift (Day or Night) and alternate weekends. **Requirements**: Security supervisor Experience PSiRA Accredited Valid SAPS Firearm competency (Handgun/Rifle) Valid Drivers license Sober habits Must be able to work Day/night shift depending on a shift roster. Must be able...

  • Security Officer

    3 days ago

    Durban, South Africa IDLANGAMANDLA SECURITY PROTECTION AND PROJECTS Full time

    **Main Job Tasks, Duties and Responsibilities** - patrol designated property to monitor and prevent intrusion, damage, hazards and breaches of security - protect property and tenants from theft, damage, trespassing or accidents - provide a visible presence that enforces safety and security - identify and investigate suspicious behavior, threats and irregular...

  • Chief Information Officer

    2 months ago

    Durban, South Africa Durban University of Technology Full time

    The Chief Information Officer (CIO) is charged with ensuring that the University to utilize digital information and advanced technologies, such as the cloud, artificial intelligence (AI), machine learning, automation, IoT, mobile and social media, to create value for users so as to realize the objectives of ENVISION2030. The CIO is responsible for the...

  • Risk and Security Manager

    7 months ago

    Durban, South Africa takealot.com Full time

    We are a young, dynamic, hyper growth company looking for smart, creative, hard-working people with integrity to join us. We offer a market related, Total Remuneration Package which allows full flexibility according to your needs, a great work environment and a promise that you won't be bored as long as you are prepared for a challenge and want to build...

  • Chief Digital Information Officer

    7 months ago

    Durban, South Africa Durban University of Technology Full time

    The Chief Digital Information Officer (CDIO) holds the responsibility of overseeing the University's utilization of digital information and advanced technologies, including the cloud, artificial intelligence (AI), machine learning, automation, IoT, mobile, and social media. The primary goal of the CDIO is to leverage these tools to create value for users and...

  • High-Risk Security Officer

    3 weeks ago

    Durban, KwaZulu-Natal, South Africa The Legends Agency Full time

    Job Title: High-Risk Security OfficerLocation: Durban, South AfricaCompany Overview:The Legends Agency provides high-risk security solutions to clients across South Africa. We are seeking a qualified High-Risk Security Officer to join our team.Job Description:The successful candidate will be responsible for providing armed protection services to our clients,...

  • Information Systems Audit Manager

    23 hours ago

    Durban, South Africa Sapientis South Africa Full time

    A leading Financial Services and Advisory firms is seeking the services of a seasoned IT Audit specialist to take on an experienced IT/IS Audit Manager role. You will need to meet the following **minimum requirements**: - A completed BSc or BCom degree in Computer Audit, IT Audit, Internal Audit etc is essential. - More than 7 years’ experience in the IT...

  • Ict Risk

    23 hours ago

    Durban, South Africa Express Employment Professionals (Durban South) Full time

    Responsible for maintaining acceptable levels of ICT Risk, executing and overseeing implementation projects to continuously keep the ICT department prepared and in line with audit and corporate governance expectations, and applicable legislation. Effecting ICT Risk mitigation strategies based on contemporary research, best practice principles and best of...

  • Chief Digital Information Officer

    7 months ago

    Durban, South Africa Durban University of Technology Full time

    The Chief Digital Information Officer (CDIO) is charged with ensuring that the University to utilize digital information and advanced technologies, such as the cloud, artificial intelligence (AI), machine learning, automation, IoT, mobile and social media, to create value for users so as to realize the objectives of ENVISION2030. The CDIO is responsible for...