Independent Contractor: Manager: It Governance, Risk, Audit And Compliance

Sanparks; Pretoria; Sur place; ZAR 332 000 - 554 000; Temps partiel

Résumé du poste

SANParks invites an Independent Contractor: Manager: IT Governance, Risk, Audit and Compliance to lead the ICT governance program at Groenkloof National Park, Pretoria. The role focuses on COBIT 2019 alignment, risk management, auditing coordination, and regulatory compliance across ICT functions.

The successful candidate will advise senior management and governance committees, implement information security governance, and drive continuous improvement in resilience and compliance posture.

Qualifications

• 8–10 years in ICT governance, risk management, audit and information security.
• Experience advising senior management and governance committees.
• Knowledge of COBIT 2019, ISO/IEC 38500, King IV and related standards.

Responsabilités

• Develop, review and maintain ICT Governance Frameworks, policies and guidelines.
• Implement governance in line with COBIT 2019, ISO/IEC 38500 and King IV.
• Facilitate governance committees and reporting.
• Monitor governance maturity and propose improvements.
• Ensure ICT initiatives align with strategy.
• Coordinate information security awareness and training.
• Maintain ICT Risk Management Framework and ICT Risk Register.
• Coordinate ICT internal and external audits and reporting.

Connaissances

Strategic thinking

Governance implementation

Audit management

Risk analysis

Compliance monitoring

Stakeholder management

Negotiation

Analytical skills

Project management

Leadership

Communication skills

Ethical standards

Integrity

Confidentiality

Decision making

Formation

Honours Degree, Postgraduate Diploma or Master’s Degree

Outils

ITIL 4 Foundation

CISSP

ISO/IEC 27001 Lead Implementer

ISO/IEC 27001 Lead Auditor

ISO 22301 Lead Implementer (Business Continuity)

CISA

CRISC

CISM

Description du poste

Independent Contractor: Manager: It Governance, Risk, Audit And Compliance

The Organisation requires the services of an Independent Contractor: Manager: IT Governance, Risk, Audit and Compliance within the ICT Department for a period of 12 months. This role will be based at Groenkloof National Park, Pretoria.

Location

Groenkloof National Park (Head Office)

Requirements

• Information Technology
• Information Systems
• Computer Science
• Cybersecurity
• Information Security
• Informatics
• Information Management
• Information Assurance
• Professional certifications:
  • COBIT 2019 Foundation and/or
  • CISA
  • CRISC
  • CISM
• At least 5 years’ experience in:
  • ICT Governance
  • ICT Risk Management
  • ICT Audit Coordination
  • Regulatory Compliance
  • Information Security Governance
• Honours Degree, Postgraduate Diploma or Master’s Degree.
• Professional certifications:
  • CISSP
  • ISO/IEC 27001 Lead Implementer
  • ISO/IEC 27001 Lead Auditor
  • ITIL 4 Foundation
  • ISO 22301 Lead Implementer (Business Continuity)
• 8 to 10 years’ experience in ICT governance, risk management, audit, regulatory compliance and information security, including experience advising senior management and governance committees.

Knowledge:

• COBIT 2019, ISO/IEC 38500 and King IV.
• ISO/IEC 27001, ISO 31000 and the NIST Cybersecurity Framework.
• ITIL 4 and IT Service Management.
• POPIA, PAIA, PFMA, National Treasury Regulations, Cybercrimes Act and MISS.
• Cybersecurity Governance and Information Security.
• Enterprise Risk Management and ICT Risk Management.
• Internal Audit and ICT Audit Processes.
• Data Governance.
• Disaster Recovery and Business Continuity.
• Vendor/Third-Party Risk Management.
• Public Sector Governance (advantageous).
• Project Management.

Skills and Core Competencies:

• Strategic thinking and governance implementation.
• Audit management and risk analysis.
• Compliance monitoring.
• Report writing and presentation skills.
• Stakeholder management and negotiation.
• Analytical and problem-solving skills.
• Project management and leadership.
• Strong written and verbal communication skills.
• High ethical standards and integrity.
• Confidentiality and professionalism.
• Results-driven and innovative.
• Team player.
• Ability to work under pressure.
• Sound judgement and decision-making ability.

Responsibilities

• Develop, review and maintain ICT Governance Frameworks, policies, standards, procedures and guidelines.
• Implement ICT Governance in accordance with COBIT 2019, ISO/IEC 38500 and King IV.
• Facilitate ICT governance committees and governance reporting.
• Monitor ICT governance maturity and recommend improvements.
• Ensure ICT initiatives align with organisational strategy.
• Develop and maintain Information Security policies.
• Ensure implementation of security governance controls.
• Coordinate information security awareness initiatives.
• Monitor compliance with security policies.
• Support ISO 27001 implementation.
• Participate in cybersecurity governance initiatives.
• Develop and maintain the ICT Risk Management Framework.
• Maintain the ICT Risk Register.
• Monitor implementation of risk treatment plans.
• Report ICT risks to Executive Management and governance committees.
• Review supplier compliance.
• Evaluate cloud service providers.
• Monitor SLA compliance.
• Review cybersecurity posture of vendors.
• Ensure compliance with legislation including:
  • POPIA
  • PAIA
  • PFMA
  • National Treasury Regulations
  • Cybercrimes Act
  • King IV
  • Minimum Information Security Standards (MISS)
  • ISO/IEC 27001
  • ISO/IEC 38500
• Monitor compliance across ICT.
• Coordinate compliance assessments.
• Develop compliance reports.
• Conduct ICT Governance awareness.
• Facilitate Information Security awareness.
• Train users on ICT policies.
• Promote a compliance culture.
• Coordinate ICT internal and external audits.
• Monitor implementation of audit findings.
• Liaise with Internal Audit, External Audit and the Auditor-General South Africa.
• Prepare audit progress reports.
• Coordinate ICT Business Continuity Planning.
• Monitor Disaster Recovery compliance.
• Conduct governance reviews.
• Participate in Disaster Recovery testing.

Policies to be Developed, Reviewed and Maintained

• ICT Governance Policy
• Information Security Policy
• Data Governance Policy
• Acceptable Use Policy
• Password Management Policy
• Backup Policy
• Disaster Recovery Policy
• ICT Standards
• ICT Procedures

Reporting and Presentations

Prepare and present reports/submissions to:

• ICT Steering Committee
• Executive Committee (EXCO)
• Audit and Risk Committee
• Internal Audit
• External Audit
• Operations Committee (OPSCO)
• Policy and Compliance Unit (PCU)

Please Note

• If you do not receive a response within 21 days after the closing date, please consider your application unsuccessful.
• No CVs will be accepted after the closing date.
• Appointments will be made in accordance with SANParks Employment Equity policies.
• Applicants with foreign qualifications must submit SAQA evaluated results.