Group IT Governance & Risk Leader

Clicks Group; Cape Town; On-site; ZAR 900,000 - 1,500,000; Full time

Job summary

Clicks Group is seeking an experienced IT Governance Manager to lead the GRC framework across the Group, including UPD and other entities. The role encompasses IT risk, data governance, audit, change management, and third‑party risk, with the authority to challenge technology teams and ensure effective controls.

Reporting to the IT Governance & Security Executive, you will collaborate with cybersecurity and technology leadership to strengthen regulatory compliance, control effectiveness and

Qualifications

• Bachelor's degree in Information Technology, Information Systems, Computer Science, Commerce or Risk Management, or equivalent qualification.
• Certifications such as CGEIT, CISA, CRISC, COBIT, ITIL, ISO 27001 Lead Implementer/Auditor are advantageous.
• Extensive experience in IT governance, risk or audit in a complex enterprise.

Responsibilities

• Develop and implement the Group IT governance strategy and framework across Clicks Group and entities in line with King V and COBIT.
• Lead governance, risk and compliance activities including policy, controls, audits and supplier risk management.
• Oversee IT change, release governance, disaster recovery and service continuity efforts.
• Provide governance oversight of IT procurement and third‑party assurance processes.
• Embed governance requirements into projects and major initiatives.

Skills

IT governance

Risk management

Audit & assurance

Regulatory compliance

Data governance

Education

Degree in IT or related field

Job description

Clicks Group is seeking an experienced IT Governance Manager to lead the GRC framework across the Group, including UPD and other entities. The role encompasses IT risk, data governance, audit, change management, and third‑party risk, with the authority to challenge technology teams and ensure effective controls.

Reporting to the IT Governance & Security Executive, you will collaborate with cybersecurity and technology leadership to strengthen regulatory compliance, control effectiveness and