ICT GOVERNANCE SPECIALIST

SUMMARY:
ICT governance, risk management, and compliance

POSITION INFO:

There is a position for 24 months fixed term contract for ICT GOVERNANCE SPECIALIST in Pretoria.

PURPOSE OF THE JOB

To manage and continuously enhance ICT governance frameworks and processes in alignment with COBIT, ITIL best practices, and the South African DPSA Governance Framework.

This role ensures effective ICT governance, risk management, and compliance across the organization, complementing the work of the ICT Security Specialist.

It ensures adherence to key South African legislative and regulatory requirements.

REQUIRED QUALIFICATIONS

• Degree or diploma in Information Technology.

• Relevant CISSP (Certified Information Systems Security Professional) or CISM (Certified Information Security Manager) certification or equivalent.

• Certified COBIT and ITIL practitioner.

• TOGAF certification (recommended.

REQUIRED WORK EXPERIENCE

• Minimum 5 years of IT Governance specialist role experience in at least three of the following areas: Information Security Governance

Information Security Program Management o Incident Response Management

Operational Information Security

• Risk assessment experience Risk Management

• Gap analysis.

KEY DELIVERABLES

ICT Governance Framework Development and Compliance:

• Policy Development and Compliance: Develop, maintain, and enforce ICT governance frameworks aligned with COBIT, ITIL, ISO 27001/2, DPSA Governance Framework, and South African legislation etc.

• Ensure compliance with PFMA, ECTA, and other applicable legislation, incorporating these into ICT governance processes.

• Align ICT governance processes with ISO 9000 standards for quality management, ensuring adherence to NARSA requirements for information governance.

Risk Management and ICT Governance Support:

• Support the ICT Security Manager/Specialist in developing risk management frameworks aligned with the POPI Act and PAIA, ensuring protection and privacy of personal information.

• Maintain and update the ICT and cybersecurity risk register, ensuring alignment with organizational risk management strategies and compliance with South African regulations.

• Generate risk management reports, perform gap analyses, and recommend risk treatment plans. ICT Service Management and Operational Support:

• Implement and manage ITIL-based service management processes, including change, problem, and configuration management, ensuring compliance with ECTA.

• Oversee the continuous improvement of ICT service delivery, to measure and enhance service quality. Performance Monitoring and Reporting:

• Accumulate and analyse metrics related to ICT governance, risk management, and compliance,

• Report on compliance, performance constraints, and risks, ensuring alignment with PFMA and PAJA requirements.

Stakeholder Engagement and Leadership:

• Provide guidance to management on risk identification, control implementation, and ICT governance while coordinating closely with the ICT Security Manager/Specialist.

• Ensure that stakeholder engagement processes comply with PAIA and the POPI Act, protecting information privacy and ensuring transparency.

Compliance and Best Practices

• Ensure that implemented and managed of IT Governance aligned with COBIT 2019 domain, ITIL Domain services,

• Implement and ensure compliance with regulatory requirements of IT Governance aligned with standards such as ISO/IEC 38500, ISO/IEC 27001, ISO/IEC 27002, ISO 9001, ISO 14589, ISO/IEC 20000, ISO 14589, ISO Domains: ISO 31000, ISO/IEC 27005, ISO 9001, ISO Domains: ISO 31000, ISO/IEC 27005. 3

• Legislation: Compliance with PAIA (Act No. 2 of 2000), POPI Act

• Legislation: Compliance with PFMA (Act No. 1 of 1999), PAJA (Act No. 3 of 2000)

• Legislation: Compliance with ECTA (Act No. 25 of 2002)

• Legislation: Compliance with POPI Act, PAIA (Act No. 2 of 2000)

• NARSA (Act No. 43 of 1996),

• ECTA (Act No. 25 of 2002)

COMPETENCIES AND SKILLS

Technical Competencies

• Strong knowledge of current ICT technologies and operations architecture, policies, processes, systems, and tools.

• Ability to translate business needs into ICT and operational policies and solutions.

• Knowledge of ICT project planning, application development, and ICT governance best practices.

• Experience in implementing and managing, quality management standards.

• Effective communication and people skills, including conflict-management, working across multiple teams and with diverse stakeholders.

Behavioural Competencies:

• Customer Focus: Crafting and implementing service practices that meet customers'' needs,

• Achievement Orientation: Setting and achieving high goals, continuously improving.

• Initiative: Identifying and implementing process improvements that enhance quality management and governance.

• Decision-Making: Allocating responsibilities to maximize effectiveness and quality outcomes.

• Strategic Thinking: Committing to long-range goals and plans, incorporating quality management principles.

• Continuous Learning: Actively pursuing learning opportunities and applying new knowledge to improve quality management and governance.

• Relationship Building: Establishing strategic relationships across the organization, ensuring alignment with quality management practices.

send cv that has 3 ref: