Ict Governance Risk & Compliance Analyst

Requirements

A Grade 12 certificate and an NQF 6 in Information Technology/Computer Science qualification as recognized by SAQA. A degree (NQF 7) in 78 ICT/Computer Sciences will be an advantage. COBIT 5-foundation certification. At least two (2) years’ experience in a GRC-related role, such as risk management, compliance, and or internal audit. Experience in working with various stakeholders across government agencies to gather information and provide guidance on ICT GRC matters. Knowledge of ICT Governance, risk, security, compliance and continuity methodologies and practices. Knowledge of IT service management frameworks (e.g. ITIL) and their application in a GRC context. Familiarity with ICT GRC tools and platforms (e.g. RSA Archer, MetricStream. OpenPG). Good communication (verbal and written), analytical, collaboration, and adaptability skills. Ability to work under pressure and in a team as well as able to travel when required. A valid driver’s license.

Key Responsibilities

Assist in developing and implementing GRC policies, procedures, and frameworks to ensure compliance with regulatory requirements. Identify and assess risks associated with ICT operations and develop strategies to mitigate or manage those risks. Provide support on governance, risk and control tools implementation and workflows. Manage customer relations. Ensure effective implementation of GRC initiatives in ICT. Conduct ICT governance risk compliances and continuity research. Analyse and interpret data from various sources to identify trends, patterns, and potential issues that may impact the organisation’s risk profile. Provide assistance with research, idea management and innovation management. Be part of permanent in-house programme team, providing organisational learning, improved capability, resilience and value for money. Monitor and report continuity on ICT governance, risk and compliance. Develop and maintain reports, dashboards, and other visualisations to communicate ICT GRC metrics and performance indicators to senior management and other stakeholders. Identify and correct weaknesses. Handle risks and audit queries. Identify, mitigate and manage ICT risks. Tracing resolution of ICT audit findings. Establish contingency plans with backup resources and accommodation for prospective automated business processes.

How to Apply

Enquiries