IT Risk & Compliance Specialist

 

Recruiter:

Boikago Recruitment Agency (Pty) Ltd

Job Ref:

ITRISK2021

Date posted:

Wednesday, February 10, 2021

Location:

Johannesburg, South Africa

Salary:

R780 000 negotiable


SUMMARY:
IT Risk & Compliance Specialist

POSITION INFO:

A financial services company based in Sandton is looking for an IT Governance Risk & Compliance Specialist

Purpose of the Role
The role will assist with and participate in the planning, design, implementation, operation, and maintenance of IT Governance, Risk & Compliance (GRC) efforts intended to support Business, IT Risk Management and Assurance goals and objectives. Primary functions will include leading and participating in the assessment of IT risks and control effectiveness for applications, infrastructure, and IT projects. This will involve the collection of appropriate and relevant data for the monitoring and analysis of specific IT control activities, liaising with and providing consultative support to IT control owners and performers, generation of reports for analysis, assessment and presentation to IT and business management, recommendations on and tracking of control remediation, and coordination of efforts with internal and external auditors.

Key Responsibilities:
1. IT Governance Management
• Analyse and recommend operational and business workflow changes to management in order to strengthen the control environment/security posture.
• Participates in IT GRC team efforts to plan, design, implement and maintain IT Governance, Risk & Compliance initiatives, and their supporting elements.
• Assist with maturing the IT Governance system to produce measurable results toward achieving IT strategies and ensuring that IT investments support business objectives.
2. IT Risk Management
• Consultation and assistance to Risk & Control Owners in the planning, design, implementation, operation, maintenance & remediation of control activities and other supporting requirements (e.g. policies, standards, processes, system configurations, etc.) as appropriate.
• Coordination, tracking and reporting of remediation plans and progress for all identified IT Control deficiencies
• Perform ad-hoc duties as assigned to ensure the smooth functioning of the IT GRC function and maintain a good reputation with Auditors, Compliance and Risk Departments.
• Maintain and monitor that the IT risk framework is aligned with the approved enterprise risk management framework
• Integrate Cyber risk into IT Risk Management practices, processes, procedures, and activities.
Sasria is committed to diversifying its staff profile in terms of its transformation agenda and encourages candidates from previously disadvantaged backgrounds to apply. 
• Co-ordinate periodical internal risk assessments in various IT functions and ensure vulnerability remediation and tracking.
• Conduct IT risk assessments (including projects risk) and analyse the effectiveness of controls and report on them with actionable recommendations.
• Facilitate disaster recovery and business continuity initiatives with relevant stakeholders.
3. IT Compliance
• Proactive management of compliance requirements to improve the division’s compliance maturity with legal and regulatory requirements such (POPIA, ETC act, Cyber bill, RICA etc.)
• Monitor and review compliance with regulatory requirements and practices to ensure
IT-related activities are meeting prescribed standards.
• Act as compliance champion for the IT Division.
• Maintain and facilitate data protection activities to ensure full compliance with POPIA and associated regulations on personal identifiable information and business-related sensitive information.
4. Adhoc
Perform any reasonable tasks as and when required by the Line Manager or other seniors.

Minimum experience & qualifications required

• National Diploma in IT /Bachelor or Relevant equivalent to NQF Level 6.
• IT Governance certification or ITIL & COBIT mandatory.
• CRISC, CISSP, CISA or CGEIT certification is strongly preferred.
• Minimum 7 years of experience in IT Governance Risk and Compliance field
• Experience with GRC methodologies, tools, and enablers.
• Hands-on experience with implementation and monitoring of one or more IT Governance frameworks (COBIT, ITIL, ISO etc.).

Behavioural skills required

  • Excellent understanding of IT operational processes and controls including projects.
  • Excellent understanding of Regulatory requirements facing the IT environment (POPIA, GDPR).
  • Must be persuasive and be able to communicate GRC related concepts to a broad range of technical and non-technical staff.
  • Solid understanding of security risks and preventative controls.
  • Sound knowledge, understanding and application of the relevant legislation.
  • Established knowledge of the IT frameworks, vocabulary, and best practices.
  • Experience of delivering excellent user experience.
  • Meticulous
  • Self-starter and deadline driven
  • Customer service driven
  • Honesty and integrity
  • Ability to handle confidential matters in a professional manner
  • Negotiation and Conflict Resolution
  • Fairness
  • Resilient
  • Innovative


 

NB! This job is now closed. You can apply for other jobs by uploading your CV.



 

 

 

Similar jobs you might be interested in:

Records Management Encryption Specialist
Location: Johannesburg
Salary: 250 Hourly
New Contract role available for 6 month contract with top tier bank for Records Management and Encryption specialistData Privacy, Records Management & Encryption specialistAre you detail‑driven, compliance‑focused, and passionate about protecting sensitive information?This role is ideal for a specialist who enjoys working at the intersection of data privacy, information governance, and sec...
2 days ago


Internal Auditor (Independent Contractor)
Location: Johannesburg
Salary: 000
Identify, assess, and mitigate business and financial risks, and evaluate the effectiveness of risk management strategies.
2 days ago


Network / API Specialist
Location: Johannesburg
Salary: 250 Hourly
New Job opportunity - 6 months contract role with top tier bank Transactional Banking Network & API specialistReady to step into a high-impact role supporting the digital backbone of transactional banking?This opportunity is ideal for a technically strong specialist who enjoys problem-solving, client interaction, and working behind the scenes to keep critical banking channels secure, stab...
2 days ago


Warehouse Manager
Location: Johannesburg
Salary: Monthly
Leading supplier of kitchen utensils, industrial cookware, commercial kitchens & appliances to the hospitality & food service industries based in Johannesburg is looking for a Warehouse Manager. The Warehouse Manager is responsible for the overall performance of the warehouse responsible for the planning, organising, directing and controlling of all warehouse activities. The suit...
2 days ago


Client Service Specialist
Location: Johannesburg
Salary:
2 days ago


IT Auditor
Location: Johannesburg
Salary: 600000 Annually
it Auditors - We Want to Connect with You! (Across South Africa)
3 days ago


Assistant Credit Control Manager
Location: Johannesburg
Salary: 900000 Annually
From managing accounts to shaping strategy, this is where your credit control career grows.
3 days ago


L2 System Engineer
Location: Sunninghill
Salary:
Our client is seeking a highly skilled L2 Systems Engineer to join their company in Gauteng. This role requires an experienced professional who can lead technical initiatives, drive the transition toward proactive, data-driven and intelligence-led it services, and ensure strict regulatory and cybersecurity compliance within a Managed Intelligence Platform (MIP) environment.
3 days ago


Cyber Security Engineer
Location: Midrand
Salary: Hourly
Brief Description:Are you an experienced Cyber Security Engineer with a strong background in protecting systems, networks, and data from security threats? I’m currently inviting skilled Cyber Security Engineers to apply for upcoming contract and long-term assignments with various clients across South Africa.
3 days ago


Head of People & Operations (Senior Manager)
Location: Johannesburg
Salary: Market-Related
This newly created senior management role exists to provide stability, coordination, and operational oversight across key support functions.
3 days ago


Create a free job alert for IT Risk & Compliance Specialist in Johannesburg

Enter your email address below and we will email you similar jobs when they become available:

You can cancel at any time. We will not spam you.
By giving us your email address your agree to our Terms and Conditions