IT Governance Specialist - 5 MonthContractMinimumRequirements:Matric (Grade 12)3 year degree in IT or related3-5 years in a similar roleResponsibilities:Develop and implement a comprehensive IT GRCstrategyDevelopment and implementation of ITGovernance, Risk Management, and Compliancepolicies, processes, and proceduresImplementation and embedment of variousframeworks (e.g. COBIT, ITIL, ISO, NIST, SABSA,PRINCE II, CMM, etc)Implementation of IT controls in alignment with risk,legislative and regulatory requirements, andindustry trendsDevelop, monitor and report on IT governancemetrics and performance indicatorsAssist in the maintenance of IT alignment activities,including report submissions, across variousgovernance committees and structuresAssist the various IT departments with thedevelopment and maintenance of incidentresponse planAssist in the preparation of stakeholdercommunications in response to cyber security incidentsMaintain accurate and up-to-date documentationrelated to IT GRC activitiesEstablish processes for continuous monitoring andreporting on compliance and risk managementactivitiesConduct periodical internal risk assessments invarious IT departments and tracking of applicationaccess reviews, active directory reviews,information security maturity, network andvulnerability assessments, and IT Audits identifyingany gaps or areas for improvementLead preparations and facilitate audits for ITcertifications, such as ISO27001Maintain and drive the implementation of mitigationcontrols of the IT Risk RegisterContinuously analyze the effectiveness of IT andInformation Security controlsCollaborate with internal stakeholders to performrisk analysis on information hosted by third partiesand controls implemented, ensuring themaintenance of acceptable levels of residual riskEnsure visibility of audit and risks by escalating tothe relevant committeesFacilitate IT disaster recovery and businesscontinuity initiatives, including testingContinuously assess the adequacy of the IT andInformation Security business continuity anddisaster recovery plans in conjunction with RiskManagement Develop an IT risk profile for the university inalignment with the approved Risk Managementframework and processCoordinate and support internal and externalcompliance auditsOversee and evaluate compliance with regulatoryrequirements and practices to ensure that ITrelated activities adhere to prescribed standardsEnsure the organizations IT practices meet allapplicable legal and regulatory requirementsManage execution of compliance activities toenhance the university's compliance maturity withthe applicable legal and regulatory standards suchas POPIA, ETC Act, Cybercrimes ActOversee and facilitate data protection activities toensure full compliance with POPIA and associatedregulations concerning personally identifiableinformation and business-related sensitiveinformationDevelop, implement, and monitor reportingmechanisms for IT Governance, RiskManagement, and Audit, to support complianceand highlight areas of exposure to managementEnsure timely and accurate reporting to regulatorybodies as required
#J-18808-Ljbffr