GRC Analyst: Risk & Compliance for Financial Services

Network Recruitment; Johannesburg; On-site; ZAR 420,000 - 620,000; Full time

Job summary

Network Recruitment is seeking a GRC Analyst to support day-to-day information security governance and ICT governance frameworks. You will work with security, IT, cloud, and risk teams to assist audits, regulatory requirements, risk management, and operational resilience initiatives.

The role targets candidates with strong analytical and documentation skills, experience in regulated environments, and a passion for cybersecurity governance and compliance.

Qualifications

• 23 years' experience in Governance, Risk & Compliance, Information Security, Risk Management, or Compliance.
• Experience within financial services or another highly regulated environment.
• Exposure to ICT risk, cyber risk, or technology compliance activities.

Responsibilities

• Support the maintenance and improvement of information security governance frameworks.
• Assist with ICT and information security risk assessments and risk register management.
• Maintain control evidence and support audits (internal, external, regulatory).
• Support compliance initiatives relating to data protection, cybersecurity, and operational resilience requirements.
• Conduct third-party and supplier risk assessments and due diligence reviews.
• Assist with incident governance, business continuity, and disaster recovery processes.
• Track remediation actions, audit findings, and control improvements through to completion.
• Prepare risk and compliance reporting for management and governance forums.
• Collaborate with technical and business teams to embed compliance and risk management practices.

Skills

GRC

Risk assessment

Regulatory compliance

Audit support

Documentation

Education

Bachelor's degree / Diploma in IT / InfoSec / Risk / Compliance

Job description

Network Recruitment is seeking a GRC Analyst to support day-to-day information security governance and ICT governance frameworks. You will work with security, IT, cloud, and risk teams to assist audits, regulatory requirements, risk management, and operational resilience initiatives.

The role targets candidates with strong analytical and documentation skills, experience in regulated environments, and a passion for cybersecurity governance and compliance.