Specialist: Ict Governance Risk and Compliance

3 weeks ago


Pretoria, South Africa SABS Full time

**Job Advert Summary**:
**About SABS**

The South African Bureau of Standards (SABS) is mandated to develop, promote and maintain South African National Standards (SANS); promote quality in connection with commodities, products and services; and render conformity assessment services and assist in matters connected therewith. Working for the SABS opens the mind to the world around you. We offer diverse career paths in a dynamic environment that nurtures and recognises talent and potential. Become part of our vision of being a trusted standardisation and business assurance solution provider and join a team that fosters accountability, excellence and innovation in an inclusive workplace.

SABS is an equal opportunities employer, and our recruitment will be done in line with the Employment Equity Act 55 of 1998 and our EE Policy.

**Purpose Statement**

To design, develop, implement and maintain ICT Governance, Risk and Compliance strategic frameworks and
activities, data privacy compliance reporting and processes as well as conduct regular governance audits and take
corrective action on behalf of the SABS to support business operationsand strategic objectives.

**Minimum Requirements**:
Diploma + Advanced Diploma /B-Degree in ICT, IS, Computer science or a related field.

Certified in the Governance of Enterprise IT (CGEIT) certification is essential.

Certified Information Systems Auditor (CISA) certification is advantageous.

Certified in Risk and Information Systems Control (CRISC) certification is advantageous.

8 years relevant work experience in ICT Governance Risk and Compliance

**Duties and Responsibilities**:
**Functional Management**
- Provide an ICT Governance, Risk and Compliance (GRC)?framework, including data compliance and cybersecurity risk?aligning ICT with the overall objectives of SABS.
- Coordinate the development and implementation of ICT policies, standards, processes and procedures and ensure that data compliance standards are adhered to throughout the organisation and escalate non-compliance issues.
- Monitor and evaluate adherence to ITC policies at the divisional and organisational level and escalate non-compliance to line management for corrective action.
- Ensure that all relevant controls, policies and procedures are embedded and monitored as operating effectively and that actions are in place to address emerging risks and incidents.
- Identify, report and ensure implementation of mitigation of all ICT related cybersecurity threats and risk assessment procedures.
- Implement controls to mitigate risks identified during the risk assessment process.
- Implement and stress test the Disaster Recovery Plan to ensure ICT business continuity processes and procedures are running smoothly within the organisation.
- Ensure that independent annual vulnerability and penetration testing are performed in the SABS environment and implement remedial actions as required.
- Contribute to the development of the Business Continuity Strategy and process in consultation with the Head: ICT to ensure readiness for recovery from ICT service interruptions.
- Ensure and coordinate regular Business Impact Analyses of ICT Services on SABS processes.
- Track timely closure of identified control gaps and risk mitigation plans and actively support action owners during issue remediation.
- Ensure that internal control frameworks are developed and implemented across the organisation with regard to IT Risk Standards, ICT controls and regulatory and legislative requirements.
- Review and update policy / standards compliance and exceptions, and report status to management and document advice for corrective actions.
- Develop and coordinate the implementation of an IT governance, metrics collection, and reporting capability across the ICT division.
- Provide guidance on implementing ICT compliance control objectives and provide support for gap analysis initiatives.
- Provide input to improve efficiency and effectiveness of ICT cybersecurity governance services.
- Act as point of contact within the ICT division with regards to risk and compliance issues.
- Coordinate the ICT audit process and ensure that related audit activities and requests are handled efficiently and effectively.
- Support ICT team during the planning and subsequent phases of an audit as well as during the audit close-out process.
- Report on all ICT Governance, Risk and Compliance matters as required.
- Provide technical support and training to SABS users with regards to ICT Governance and Risk principles.

**Risk and Compliance Management**
- Assist in identifying and adhering to fraud controls, risk prevention principles, sound governance and compliance processes, and tools to identify and manage risks.
- Support and provide evidence to all internal and external audit and regulatory requirements.
- Maintain quality risk management standards in line with regulatory requirements.
- Maintain and enforce all related Service Level Agreements to minimis



  • Pretoria, South Africa Kamo Placements Full time

    **JOB DESCRIPTION** - Provide an ICT Governance, Risk and Compliance (GRC) framework, including data compliance and cybersecurity risk aligning ICT with the overall objectives of company. - Coordinate the development and implementation of ICT policies, standards, processes and procedures and ensure that data compliance standards are adhered to throughout the...


  • Pretoria, South Africa Kamo Placement Full time

    Gauteng, Tshwane (Pretoria) - Annually Cost To Company (Market related, Negotiable) To design, develop, implement and maintain ICT Governance, Risk and Compliance strategic frameworks and activities, data privacy compliance reporting and processes as well as conduct regular governance audits and take corrective action on behalf of the company to support...


  • Pretoria, South Africa Affirmative Portfolios Full time

    **Information Technology** **Pretoria** ***: **JOB OUTLINE** **Specialist: ICT Governance Risk and Compliance** **PERMANENT** **PRETORIA** **Department -** Corporate Services **Sub division** - ICT **Reports to -** Head: ICT & Knowledge Management **Overview**: Design, develop, implement and maintain ICT Governance, Risk and Compliance strategic...


  • Pretoria, South Africa Secondments Recruitment Full time

    **Job Advert Summary**: To provide leadership, plan, and manage a large Information and Communication Technology (ICT) Division with regards to ICT Governance, ICT risks and Compliance risks using best industry practices and standards, identify non-conformance and ensure remediation, mitigation and/or positive acceptance of risk. Ensure compliance of all ICT...


  • Pretoria, South Africa Financial Sector Conduct Authority Full time

    **Purpose of the Job**: To ensure that strategic and operational business problems are accurately framed, understood, in line with established business analysis and process management practices in order to ensure outcomes meet business requirements. The person appointed will report to the Head: ICT Governance, Business Relationship and Risk. **Key...


  • Pretoria, South Africa Professional Sourcing Full time

    **Job Overview**: **Specialist: IT Governance, Risk and Compliance Specialist (24-Month Fixed-Term Contract)** - The position is limited to previously disadvantaged groups due to BBBEE requirements._ - _ **Location: Pretoria, Gauteng** There is a newly created job opportunity available at a **highly recognised financial institution** for a **Specialist: IT...


  • Pretoria, South Africa Nambiti Technologies Full time

    We are recruiting for an ICT Risk and Compliance Officer Provide guidance, feedback, and support across ICT regarding identification of risk, risk mitigation and management. - Create appropriate metrics to quantify, track and report on identified risk across ICT. - Provide analysis and assessments for risks associated with relevant ICT projects...


  • Pretoria, South Africa Khomeliwa Consulting Full time

    **SPECIALIST: IT GOVERNANCE, RISK & COMPLIANCE, Pretoria, R857k - R1,2m p/a** Our client, the SA Revenue Service (SARS), seeks to appoint the SPECIALIST: IT GOVERNANCE RISK & COMPLIANCE to be based at their head office in Brooklyn, Pretoria. We are looking for a highly skilled, results driven, self-directed specialist with extensive knowledge and...


  • Pretoria, South Africa Khomeliwa Consulting Full time

    **SENIOR SPECIALIST: IT GOVERNANCE, RISK & COMPLIANCE, Pta,** **R1,3m - R2,0m per annum** Our client, the SA Revenue Service (SARS), seeks to appoint the SENIOR SPECIALIST: IT GOVERNANCE RISK & COMPLIANCE to be based at their head office in Brooklyn, Pretoria. The incumbent will be a highly skilled, results driven, self-directed senior specialist with...


  • Pretoria, South Africa H & S Labour Brokers Full time

    **Pretoria** **Negotiable from: R733, 000 CTC** Our client is currently seeking an experienced Specialist: ICT security based in Pretoria. The main function of this role is to design, develop, implement and maintain cybersecurity activities across the organisation and identify and establish security initiatives and standards as well as review and update...


  • Pretoria, South Africa HR Genie Full time

    Our Client a leading organization firm is seeking a Specialist: Compliance Risk to join their team in Pretoria. They offer stability, growth, attractive salary along with excellent benefits and a great working environment. About the Position An Exciting opportunity is available for a highly skilled, results driven, self-directed specialist with extensive...


  • Pretoria, South Africa Kamo Placements Full time

    Ensure the effective implementation and maintenance of all system access control and maintenance of role-based security, and conduct regular security audits and take corrective action to support the delivery of optimal service to the company. - To advise on and ensure the effective implementation and maintenance of secure access and communicate feedback to...


  • Pretoria, South Africa Affirmative Portfolios Full time

    **Information Technology** **Pretoria** ***: **JOB OUTLINE** **Specialist: ICT Security** **PRETORIA** **PERMANENT** **Division **- Corporate Services **Sub division** - ICT **Reports to -** Head: ICT & Knowledge Management **Overview**: Design, develop, implement and maintain cybersecurity activities across the organisation and identify and establish...


  • Pretoria, South Africa Financial Sector Conduct Authority Full time

    **Purpose of the Job**: To ensure that strategic and operational business problems are accurately framed, understood, in line with established business analysis and process management practices in order to ensure outcomes meet business requirements. The person appointed will report to the Head: ICT Governance, Business Relationship and Risk. **Key...


  • Pretoria, South Africa Kamo Placement Full time

    Gauteng, Tshwane (Pretoria) - Annually Cost To Company (Market related, Negotiable) Design, develop, implement and maintain cybersecurity activities across the organisation and identify and establish security initiatives and standards as well as review and update the company’s IT security policies by setting procedures and guidelines that will ensure all...


  • Pretoria, South Africa HR Genie Full time

    Our Client a leading organization firm is seeking a Senior Specialist: Compliance Risk to join their team in Pretoria. They offer stability, growth, attractive salary along with excellent benefits and a great working environment. About the Position An exciting opportunity is available for a highly skilled, results driven, self-directed senior specialist...


  • Pretoria, South Africa Praesignis (Pty) Ltd Full time

    **Minimum Qualification & Experience Required** Relevant Honours / Postgraduate Diploma (NQF 8) AND 10-12 years' experience in an IT Governance, Risk and Compliance environment, of which 3-4 years ideally at IT specialist level ALTERNATIVE Relevant Bachelor's Degree / Advanced Diploma (NQF 7) AND 12 - 15 years related experience in an IT Governance, Risk...


  • Pretoria, South Africa FRIMO RECRUITMENT AGENCY Full time

    **My client in Pretoria is looking for Specialist**: ICT Security for 16 months **MAIN PURPOSE OF THE JOB**: To define, operate and manage Sedas information security management system and services to minimise business impact of operational information security vulnerabilities and incidents in line with Sedas ICT governance framework and policies. **KEY...


  • Pretoria, South Africa HR Genie Full time

    Our Client a Leading Organization is seeking 2 Senior Specialist: Compliance Risk to join their team in Pretoria. They offer stability, growth, attractive salary along with excellent benefits. About the Position Our Client is looking for an experienced and seasoned leader who is a highly skilled, results driven, self-directed individual with extensive...


  • Pretoria, South Africa Affirmative Portfolios Full time

    **Information Technology** **Pretoria** ***: **JOB OUTLINE** **ICT Business Applications, Manager** **PERMANENT** **PRETORIA** **Division** - Corporate Services **Sub division** - ICT Business Applications **Reports to** - Head: ICT & Knowledge Management **Subordinate Level**: - Specialist: Application Development & Support - Specialist: Web...