Senior Specialist: Technology Assurance

Vodafone; Midrand; On-site; ZAR 50 000 - 90 000; Full time

Job summary

An established industry player seeks a skilled professional to enhance its Cyber Security and Governance frameworks. This role involves designing risk matrices, conducting assessments, and guiding management on control gaps. You will leverage your expertise in IT Audit and Risk Management to ensure robust compliance within a dynamic technology environment. The ideal candidate will possess a relevant degree and certifications, along with extensive experience in technology security. Join a forward-thinking organization that values diversity and offers enticing benefits, ensuring a rewarding career path in a collaborative workplace.

Benefits

Enticing incentive programs

Retirement funds

Medical aid benefits

Cell phone and data benefits

Fibre connection discounts

Exclusive staff discounts

Qualifications

• 5-8 years experience in risk, assurance, controls and compliance management.
• Relevant certifications such as CISA, CISM, CRISK, CISSP, ITIL are advantageous.

Responsibilities

• Design Risk and Controls Matrices and execute assessments.
• Perform reviews on technology processes and systems to enhance controls.

Skills

IT Audit

Risk Management

Cyber Security

Analytical Skills

Client Engagement

Education

BSc Computer Science/Engineering

BCom Informatics

Relevant Technology Post Graduate Degree

Tools

Linux

Windows

SQL

Oracle

MySQL

Python

JavaScript

Job description

When it comes to putting people first, we're number 1.

The number 1 Top Employer in South Africa.
Certified by the Top Employer Institute 2025.

Role Purpose

To provide assurance within Technology across the in Vodacom South Africa covering the areas of Cyber Security, and GITC including governance & reporting, independent assurance, risk & control guidance and continuous monitoring of the Risk and Controls environment.

Your responsibilities will include:

• Design of Risk and Controls Matrices (RCMs) and execution of assessments against RCMs
• Periodic reporting on reviews of the control's environment and remediation of gaps identified
• Perform reviews on technology processes, systems, infrastructure and network infrastructure across the Cyber Security and GITC environments with the aim of proactively enhancing the control environment.
• Guiding management on recommendations for closure of control gaps found.
• Control design and implementation across the Cyber Security and GITC environments within Technology and related processes
• Reporting on Technology assurance related matters at the Technology Assurance Steerco, Risk Management Steerco, Fraud Steerco, Cyber Security Steerco, and audit Committee.
• Server as a domain lead and subject matter expert for end-to-end governance related matters within a specific Technology domain.
• Process Governance and Quality - Design, implement and monitor policies, processes, procedures as required

The ideal candidate for this role will have:

• A relevant IT/Technology Degree (e.g., BSc Computer Science/Engineering, BCom Informatics)
• Relevant certifications would be advantageous, such as CISA, CISM, CRISK, CISSP, ITIL etc.

Overall experience 5 - 8yrs, inclusive of:

• At least 5-8 years' experience in risk, assurance, controls and compliance management in a technology environment
• At least 5 years' experience in Technology Security or a Technology Audit function would be advantageous.
• At least 3-5 years' experience in process definition and management is advantageous.
• A relevant Technology post graduate degreediploma will also be an added advantage.

Core Competencies, Knowledge, and Experience

• IT Audit, Risk Management or Cyber Security in large enterprises is required.
• Relevant Frameworks (CISA, SOX, ISO 27001/27002, CISSP) preferable
• Technical/Infrastructure knowledge is required i.e., detailed knowledge of at least three of the following platforms:
• Operating Systems (LINUX, Windows)
• IT Networks, Firewalls, VPNs
• Databases (SQL, Oracle, MySQL etc)
• GSM Network Infrastructure
• Security and Development knowledge is advantageous.
• Linux Kali and associated tools
• Asset discovery techniques
• Scripting (Linux bash, JavaScript etc)
• Python/PHP or other programming languages
• Zoning, DDos detection, Web Traffic filtering, Malware, IDPS
• Patching, Vulnerability Management, Pen Test techniques

Personal attributes required

• Grasping of technical concepts rapidly and the ability to articulate these concepts to technical and non-technical audiences.
• Strong analytical and documentation skills
• Good client engagement skills
• Good interpersonal and presentation skills

We make an impact by offering:

• Enticing incentive programs and competitive benefit packages
• Retirement funds, risk benefits, and medical aid benefits
• Cell phone and data benefits, advantages fibre connection discounts, and exclusive staff discounts offered in collaboration with partner companies

Closing date for Applications: 14 May 2025.

The base location for this role is Midrand, Vodacom Campus.

The company's approved Employment Equity Plan and Targets will be considered as part of the recruitment process. As an Equal Opportunities employer, we actively encourage and welcome people with various disabilities to apply.
Vodacom is committed to an organisational culture that recognises, appreciates, and values diversity & inclusion.

Commitment from Vodacom

Vodacom is committed to attracting, developing and retaining the very best people by offering a flexible, motivating and inclusive workplace in which talent is truly recognized, developed and rewarded. We believe that diversity plays an important role in the success of our business and we are committed to creating an inclusive work environment which respects, values, celebrates and makes the most of people's individual differences - we are not only multinational but multicultural too. At Vodacom you will have access to our excellent flexible benefits programme that you would expect from any global company.