Senior Specialist - IT Governance, Risk & Compliance

SUMMARY:

Working in close association with the Senior Manager of IT Governance, Risk Compliance to ensure that the IT Risks of the division are pro-actively mitigated and managed through the development and implementation of policies and procedures.

 

<...

POSITION INFO:

Working in close association with the Senior Manager of IT Governance, Risk Compliance to ensure that the IT Risks of the division are pro-actively mitigated and managed through the development and implementation of policies and procedures.

 

IT Governance

• Work closely with the team to implement Group-wide IT policies and procedures.
• Assist in the review of management processes (and decisions) and confirm that they are compliant with the organisation's strategy for corporate governance of information.
• Assist with establishing policy and standards for compliance with relevant global legislation relating to IT Governance, Privacy laws, data integrity and the storage of information.
• Act as the Subject Matter Expert for line managers and employees on matters relating to IT Governance.

 

IT Risk Management

• Oversee the implementation of organisation-wide processes and procedures, tools and techniques for the identification, assessment, and management of IT risk inherent in the operation of business processes and of potential risks arising from planned changes – including technology upgrades.
• Monitor the implementation and maintenance of IT risk self-assessment programs across the business.
• Work closely with the division Management to ensure that IT risks are communicated and mitigated.
• Pro-actively manage and mitigate all potential IT Risks to the business, in association with Senior Manager and team members.

 

Stakeholder Management

• Pro-actively engage with all team members within division and the rest of the business, to create awareness about IT Governance, Risk Compliance.
• Actively build positive relationships with all stakeholders.
• Assist, where required, in liaising with third party contractors or vendors on matters relating to IT Governance, Risk and Compliance.

 

Audits and Reporting

• Ensure that regular IT Governance and Risk Audits are conducted across all business units within the Company.
• Work with Internal Audit and Info Security team to identify and/or investigate any breaches of, or non-compliance with, IT Governance, Risk Compliance policies, procedures or customs in practice.
• Assist with consequence management in the event of a breach or non-compliance.
• Compile weekly, monthly, quarterly and annual reports as required.

Qualifications

• Bachelor's degree in Computer Science
• Bachelor's degree in Information Technology, Informatics, Business Management or Risk Management
• CISA, CRISC, CISM, CISSP, CGEIT or ITIL will be an added advantage
• A post graduate degree will be an advantage

 

Experience

• 5 – 8 years of experience working in IT Risk Compliance environment
• Experience working in a large or multinational organisation

 

Technical Competencies

• IT industry certification (CISA, CISSP, CRISC, CGEIT, GIAC or ITIL) or equivalent working experience

 

Behavioral Competencies

• Relationship building
• Conflict resolution
• Decision making
• Critical appraisal
• Holistic thinking
• Persuading influence
• Coaching