Audit and IT Governance Specialist

Who are we?
Santam is the market leader in the general insurance industry in Southern Africa. We are a large, diversified, expanding and transforming company and whilst based in South Africa, we are rapidly moving into a number of emerging markets, both in Africa and Asia. Our success is rooted in our passion for our clients and everything we do is centred on our delivery of Insurance Good and Proper.
Santam’s Intermediated Business (“IB”) unit requires an Audit and IT Governance Specialist for its Intermediated Business, in the Johannesburg region, reporting to the Manager: Assurance.
Intermediated Business comprises of the following business units; Broker Services, Outsourced Business, Sanlam Tied Agents, Operations and Segment Solutions.

The role is in the first line of defence, meaning within management control.

Roles & Responsibilities
Quality Assurance IT Reviews
- To conduct risk-based IT and project due diligence / governance / audit / compliance assignments covering our Intermediaries (“Binder Holders/Outsourced Services Partners/ Non-Mandates Intermediaries/ Underwriting Managers/ Premium Collection Bureaus”); primarily focusing on Premium Collection processes.
- To conduct or assist in delivering consulting services related to risk, control and governance over Information Technology portfolio of our business partners
- Audits / due diligence assignments are to be performed at our Intermediaries.
- Field work could entail:

- Assignment planning, execution, reporting and follow ups (where applicable);
- Preparing reports and advising on practical recommendations;
- Ensuring all work is adequately documented and adheres to minimum quality standards; and
- Ensuring work is completed within time and cost budgets.
- Assist in reporting to various governance forums and committees
- Provide input into strategy and annual planning.
- Client relationship management with internal Santam stakeholders as well as external stakeholders.
- Championing this role in the organisation by serving as representative at relevant, key Santam forums.
- Take responsibility for champion duties such as ongoing knowledge management and upskilling of others.

Quality Assurance
Quality Assurance Reviews conduct and Due Diligences.
- Quality Assurance Audits/Reviews (on existing Brokers/Intermediaries).
- Due Diligence Reviews (on potential new Brokers/Intermediaries).

Premium Collection Oversight
- Oversight and ownership of the risk management processes over Premium Collection which has been outsourced to our Intermediaries. Ensure that there are adequate resources internally and that Santam has ability to exercise effective oversight over the Intermediary performing the direct collection of premium services on an ongoing basis.
- Due Diligence over Premium Collection processes of Intermediaries.
- Regular Reviews/Audits of Intermediaries as to whether they
- have adequate governance, risk management and internal control framework, including the intermediary’s ability to comply with applicable laws;
- comply with our legal agreements for Premium Collections
- comply with applicable laws
- have documented controls in place to ensure the validity, accuracy, completeness and security of any information provided by the intermediary performing the direct collection of premium.
- Ownership and management of Premium Collection Agreements

QUALIFICATIONS AND EXPERIENCE
- Prior experience in conducting/managing several assignments simultaneously, some with competing deadlines.
- Experience interacting with clients at all levels including senior/executive management.
- BSc / BCom/ BTech / BEng / Honours (with Computer Science / Information Systems as a major) or similar.
- An advanced understanding of internal audit disciplines, methodologies and practices.
- Internal audit experience and experience in the insurance industry preferred.
- CISA, ISAP (SA) and/or CIA.
- H Dip Computer Audit and Masters in IT (advantageous).
- Good understanding of COBIT 2019 methodology, ITIL & COSO frameworks.
- Willing to travel locally.

SKILLS
- An advanced understanding of IT governance and management processes and risks; and risks associated with business change.
- High ethical standards and must be trustworthy.
- Strong verbal and written communication skills.
- Accountability.
- Strong team player.
- Assertive.
- Excellent facilitation skills that are specifically geared to change interventions.
- Highly skilled in leading and coaching staff.
- Able to organise own and others workloads to achieve priorities and objectives and take initiative.
- High level inter-personal and influencing skills, including experience of working with senior managers.
- Excellent communicator, internal and external (including presentation skills).
- Committed to own personal development and development of others.
- Flexible, adaptable and able to work under pressure.
- Demonstrate the capacity to think of the organisation holistically.
- Ability to desig