IT Governance and Security

**IT GOVERNANCE AND SECURITY OFFICER**

**Duties/Responsibilities**
- Ensure compliance in all functions related to governance and security. Report / escalate possible breaches and/or issues to Manager IT/Senior Manager IT.
- Co-Ordinate, discuss, monitor and evaluate Governance and security issues.
- Draft, monitor, review and co-ordinate policies, procedures, systems related to Governance and security.
- Attend sectional meetings / sessions and provide input / feedback on challenges / issues
- Oversee, Co-Ordinate, monitor and enable inter sectional operational requirements related to governance and security
- Perform the functions of ISO.
- Ensure clean audit in terms of governance and security and assist to monitor, manage and address all queries.
- Assist with change requests
- Assist with DRP/BC implementation and compliance
- Supervise strategic, tactical and operational implementation of IT security.
- Assist with compilation of tender specs, reports and all IT documentation.
- Vendor liaison at supervisory level.
- Ensure logs are managed and threats addressed daily.
- Ensure all security related systems both logical and physical are implemented and managed.
- Assist with IT Budget planning and monitoring of client approved budget deliverables.
- Assist / co-ordinate and enforce IT control forms and procedures
- Perform administrative tasks as approved by Manager/Senior Manager IT
- Assist with AG reports.
- Assist to comply to ITIL, COBIT, ISO, SABS, King IV, Acts/ legislations, other prescripts and directives and guidelines and best practices applicable to the environment.
- Assist with drafting, approval and dissemination of IT policies, procedures, and related information.
- Ensure the compliance to implementation of IT procedures, processes, mechanisms and controls.
- Assist with IT performance management and change management compliance.
- Ensure IT contingency plans are compiled, approved and enforced.
- Assist with needs analysis with users and departments on IT and the compilation and approval of related reports and processes including but not limited to IT strategy and plan.
- Assist with all the processes related to the establishment of the municipality’s IT Ethical culture.
- Compile, manage the compliance to IT risk register.
- Providing all information in the required format for audit.
- Assist with training and capacity building on governance.
- Assist with amendment and management of DRP/BC policies, plans, systems and services.
- Assist with IT infrastructure documentation.
- Assist and ensure comprehensive project management to ensure value for money.
- Develop, monitor and manage change management and contingency plans.
- Ensure comprehensive security management from end to end with continuous review and implementation of best practices.
- Develop, implement and update IT Disaster recovery and Business Continuity Plan.
- Compile, assess, and mitigate IT risks and formulate an IT risk register.

**Skills**:

- IT Risk Management (Cloud)
- IT Governance (COBIT)

**Knowledge/Experience**
- B degree or 3 year Advanced Diploma is essential
- A minimum of 3 years' experience in IT Governance, Risk Management and/or IT Compliance is essential
- A minimum of 3 years or more IT/IS and Cybersecurity audit experience is mandatory, preferably with an audit house (not internal audit)
- Mandatory: be a holder of at-least one of the following qualifications CISA, CRISC, CISSP, CRISC, CGEIT
- Preference given to cloud experience and qualification
- COBIT qualification
- Knowledge of and experience in IT Governance, Cyber Audit, Cloud Governance and Risk Management
- Healthcare industry knowledge advantageous
- Excellent report writing
- Attention to detail

**Salary**: R15,000.00 - R30,000.00 per month

Ability to commute/relocate:

- Nelspruit, Mpumalanga: Reliably commute or planning to relocate before starting work (required)