IT Portfolio Risk and QA Manager

**Purpose of the Job**:
The purpose of the IT Portfolio Risk and QA Manager role is to ensure the business risk management framework is effectively applied within the Portfolio and PMO function to ensure business continuity, security and quality. The role is accountable for promoting a strong risk and quality assurance culture within Shoprite including its employees, customers, reputation, assets and stakeholders as well as across projects and programs. The IT Portfolio Risk and QA Manager takes a leading role in offering specialist risk, governance and QA advice to influence decisions while working closely with program and projects teams to mitigate project risks and advise on appropriate management against risk frameworks. The role identifies and assesses threats, puts plans in place for if things go wrong and decides how to avoid, reduce or transfer risk.

**Job Objectives**:
Promote a strong risk culture by leading the development of program/project risk awareness and governance. This will include creating awareness of policies and standards associated with governance, risk, QA and security and how they are applied within Shoprite.

Provide specialist, expert advice to program sponsors, project and program teams and senior stakeholders as it relates to risk and quality assurance.

Play a leading and proactive role in monitoring all IT and project related risks through all phases, highlighting areas of exposure, evaluating the gravity of each risk by considering its consequences and recommending strategies and solutions to reduce risk exposure.

Review identified risks to ensure Shoprite’s assets and information are appropriately secured at all times

Monitor and review compliance with risk management strategies and practices on the project to ensure ICT-related activities are meeting minimum standards.

Generate clear QA goals and objectives for the PMO team, with clear action plans and benchmarks to track and measure progress.

Validate and ensure timeous and accurate management of responses to quality assurance audits and assessment of projects and programs including progress updates, achievements, project health, time, cost, quality requirements, risks and concerns.

Monitor ethical practices, standards and systems and reinforce their use.

Ensure all IT projects, programs and initiatives meet legal, statutory and regulatory requirements.

Act on and escalate reported breaches of rules, policies and guidelines and advise on appropriate courses of action.

Implement appropriate controls to ensure compliance with information and communications security policies and governance.

Develop KPIs for Risk, Governance and Quality Assurance as well as dashboards and reports that creates transparency and accurate tracking of risk, QA and compliance status.

Deliver regular reports and status updates to the IT Portfolio Manager, IT Leadership and key stakeholders on all required and regulated compliance metrics.

Ensure enterprise architecture on a project complies with Shoprite IT policies.

Balance competing demands and stakeholder requirements effectively to ensure key deliverables are met within required timeframes.

Manage the expectations of stakeholders through regular engagements and communication.

**Qualifications**:
Degree or Diploma in Information Technology, Computer Science or related - (essential)

IT security certification - (preferred)

**Experience**:
+5 years' experience in an IT Governance, Audit Assurance, Risk and Compliance and/or Information Security Management capacity with strong and broad understanding of project risk combined with technology and operational risk experience across large scale programs involving people, process and technology - (essential)

Experience within ICT Infrastructure and exposure to Enterprise Architecture frameworks - (essential)

Experience engaging, influencing and working with stakeholders across functions and levels - (essential)

Experience in a retail?or FMCG environment would be a significant advantage - (preferred)

**Knowledge and Skills**:
Strong and broad understanding of QA assessment, execution and planning (for example QA effort estimations, preparing test execution plans, scheduling and determining resource requirements, identifying project dependencies and executing risks assessments) - (essential)

Knowledge of governance processes and standards of ICT, risk, governance and security technical standards - (essential)

Knowledge of risk and QA specific methodologies and tools - (essential)

Sound level of proficiency with MS Office (specifically Project and Excel) - (essential)

**Applicant Feedback Policy**: