ISGRC Leader: IT Risk, Security & Compliance

Transnet Company; Durban; On-site; ZAR 900,000 - 1,500,000; Full time

Job summary

Transnet seeks an ISGRC leader to design and govern IT risk, information security and compliance across the organisation. You will drive enterprise-wide governance, risk management and regulatory alignment, reporting to CIO and senior management, and coordinate incident response.

The role focuses on developing a comprehensive ISGRC strategy, managing audits, and ensuring regulatory adherence across all ICT functions with strong emphasis on security culture and continuous improvement.

Qualifications

• 8+ years of relevant IT/ICT risk management, audit, governance or information security experience with at least 3 years in a managerial role.
• Alternative pathways include 10+ years of relevant experience with ≥5 years in management in the above domains.
• Standard Job Requirements include a valid driver’s license and travel as required.

Responsibilities

• Lead ISGRC strategy, governance and risk programs aligned to regulatory requirements.
• Manage IT regulatory compliance, audits and reporting to regulators and executives.
• Oversee IT BCM and disaster recovery planning and testing.
• Coordinate incident response, cyber security operations and governance across IT assets.

Skills

IT Risk Management

IT Governance

Information Security

Compliance

COBIT

Education

B-degree / B.Tech in Computer Science/IT/IS (or related) with ≥8 years of experience

NQF6 + 10 years experience with ≥5 years managerial in IT/ICT domains

Tools

SAP

Job description

Transnet seeks an ISGRC leader to design and govern IT risk, information security and compliance across the organisation. You will drive enterprise-wide governance, risk management and regulatory alignment, reporting to CIO and senior management, and coordinate incident response.

The role focuses on developing a comprehensive ISGRC strategy, managing audits, and ensuring regulatory adherence across all ICT functions with strong emphasis on security culture and continuous improvement.