Information Governance Officer

Duties/Pligte Are you passionate about data privacy and information security? Do you excel in creating robust systems and ensuring compliance? We have a fantastic opportunity for an Information Governance Officer to join our team and play a critical role in safeguarding our institution's information and privacy.
- Taking charge of our personal information incident response programme. Coordinating activities to bolster our preparedness for data breaches and security issues, and leading the response efforts when incidents arise (SU's personal information incident response programme and procedure management);
- Collaborating closely with the Deputy Director of Information Governance to implement policies and procedures related to POPIA and PAIA and to provide expert input on policy development, training, and awareness initiatives (Information Governance Policy and Procedure implementation);
- Ensuring our compliance with access to information (PAIA) and privacy (POPIA) regulations (including managing the process for institutional permissions), monitoring and reporting on key performance indicators related to breach handling, and supporting the establishment of our Information Curatorship Programme and Forum (Compliance Framework);
- Supporting our business continuity, resilience, and disaster recovery efforts and managing data protection and impact assessment practices to ensure regulatory compliance and institutional resilience (Business Continuity and Disaster Recovery);
- Building and maintaining strong internal relationships to effectively manage incident response on an operational level (Stakeholder Management).

Het jy 'n passie vir data-privaatheid en die sekuriteit van inligting? Is jy 'n uitblinker wanneer dit by die skepping van robuuste stelsels en die versekering van nakoming kom? Ons het 'n fantastiese geleentheid vir 'n Beampte: Inligtingsoorsigbestuur om by ons span aan te sluit en 'n kritieke rol in die beveiliging van ons instelling se inligting en privaatheid te vervul.
- Staan in beheer van ons program in reaksie op voorvalle met persoonlike inligting. Koördineer aktiwiteite ten opsigte van gereedheid vir dataskendings en sekuriteitskwessies, en lei die reaksie wanneer voorvalle opduik (bestuur die US se program en prosedure in reaksie op voorvalle met persoonlike inligting);
- Noue samewerking met die Adjunkdirekteur van Inligtingsoorsigbestuur om beleide en prosedures met betrekking tot POPIA en PAIA te implementeer en om kundige insette vir beleidsontwikkeling, opleiding en bewusmakingsinisiatiewe te verskaf (implementeer die beleid en prosedure ten opsigte van inligtingsoorsigbestuur);
- Verseker dat regulasies oor toegang tot inligting (PAIA) en privaatheid (POPIA) nagekom word (insluitend die bestuur van die institusionele toestemmingsproses), monitor en verslaggewing oor sleutelprestasie-aanwysers met betrekking tot die hantering van skendings, en bied steun aan die vestiging van ons Program en Forum vir Inligtingskuratorskap (Nakomingsraamwerk);
- Steun pogings ten opsigte van sakekontinuïteit, veerkragtigheid en rampherstel, en praktyke ten opsigte van databeskerming en impakbepaling om regulatoriese nakoming en institusionele veerkragtigheid te verseker, te bestuur (sakekontinuïteit en rampherstel);
- Bou en onderhou sterk interne verhoudinge om voorvalreaksie doeltreffend op bedryfsvlak te bestuur (bestuur van belanghebbendes).

As jy 'n proaktiewe individu met 'n sterk agtergrond in inligtingsoorsigbestuur is en daartoe verbind is om datasekuriteit en privaatheid te verseker, sal ons graag van jou wil hoor. Doen nou aansoek om 'n betekenisvolle impak in ons span te maak

Job Requirements/Pos Vereistes We will consider applicants with the following variations in terms of qualifications and work experience:

- Any bachelor's degree and at least five years' relevant experience; OR;
- A relevant professional qualification and at least four years' relevant experience; OR;
- A relevant master's degree or doctorate and at least three years¿ relevant experience;
- Relevant disciplines and experience include, but are not limited to, information policies and procedures, information-related legislative compliance, information security frameworks and standards, IT audit, physical and environmental controls, identity and access management, data loss prevention, data protection, data security awareness and training, information system attack methods and techniques, and data security incident response management;
- The ability to communicate effectively in a multilingual and multicultural environment, specifically in English, and preferably also in Afrikaans.

**Competencies**:
**Technical competencies**:
**All applicants must complete an online questionnaire that illustrates their understanding of the data-/information privacy-related threat landscape facing the South African higher education sector. Applicants selected for an interview will also be required to complete psychometric tests bef