IT Compliance Administrator

Eskort (Pty) Ltd; Irene; In loco; ZAR 420.000 - 640.000; Tempo pieno

Descrizione del lavoro

Eskort (Pty) Ltd is seeking an IT Compliance, Risk and Audit professional to join our Gauteng team. You will help implement and monitor IT controls, support POPIA compliance, and assist with IT governance, risk management and audit readiness.

Work closely with IT and business stakeholders to identify control weaknesses, maintain audit evidence and track remediation actions. Strong documentation and communication skills are essential in this role.

Competenze

• Diploma or degree in IT-related fields such as IT auditing, cybersecurity or risk management.
• 2–3 years' experience in IT compliance, IT auditing, governance, information security or similar roles.
• Experience with IT General Controls and maintaining audit evidence.
• Exposure to internal or external IT audits is advantageous.
• Understanding of POPIA and information security principles.
• Knowledge of access, change management, backups, disaster recovery and security controls.
• Familiarity with CIS or NIST frameworks is a plus.

Mansioni

• Assist with implementing, documenting and maintaining IT controls.
• Monitor IT General Controls, including user access, onboarding/termination, changes and backups.
• Perform periodic control reviews and maintain audit evidence.
• Identify control weaknesses and non-compliance; recommend corrective action.
• Track audit findings and remediation actions through to closure.
• Escalate overdue or high-risk findings to IT management.
• Assist with IT risk identification, assessment and monitoring.
• Maintain IT risk, control and compliance registers.
• Support IT policy development, procedures and standards.
• Conduct scheduled compliance reviews against approved controls and policies.
• Assist with monitoring third-party IT compliance.
• Monitor POPIA adherence and information security requirements.
• Review user and system access; ensure authentication controls.
• Assist with joiner, mover and leaver processes.
• Support cybersecurity, backup and disaster recovery controls.
• Assist with investigations and remediation tracking.
• Coordinate internal and external IT audit requirements.
• Gather and maintain supporting audit evidence.
• Liaise with auditors, IT personnel and stakeholders.
• Maintain an audit findings register with owners, due dates and status.
• Follow up and elevate overdue audit actions.
• Prepare monthly/quarterly compliance reports highlighting risks and findings.
• Maintain IT policies, procedures and standards; coordinate reviews.
• Identify opportunities to strengthen controls and improve audit readiness.

Conoscenze

Analytical skills

Documentation

Attention to detail

Compliance gaps

Communication skills

Independent work

Integrity

Audit management

Formazione

IT degree/diploma

Descrizione del lavoro

Minimum Requirements

Qualifications

• Diploma or degree in Information Technology, Information Systems, IT Auditing, Cybersecurity, Risk Management or a related field.

Experience

• 2–3 years' relevant experience in IT compliance, IT auditing, governance, information security or a similar control-focused role.
• Experience with IT General Controls and maintaining audit evidence.
• Exposure to internal or external IT audits would be advantageous.

Knowledge

• Understanding of POPIA and information security principles.
• Knowledge of access management, change management, backups, disaster recovery and cybersecurity controls.
• Familiarity with frameworks such as CIS or NIST would be advantageous.

Skills and Competencies

• Strong analytical and problem-solving skills.
• Excellent documentation and record-keeping skills.
• Strong attention to detail.
• Ability to identify control weaknesses and compliance exceptions.
• Good written and verbal communication skills.
• Ability to work independently and follow up with stakeholders.
• High level of integrity when handling confidential information.
• Ability to manage multiple audit findings, deadlines and compliance activities.

Key Responsibilities

1. IT Compliance and Audit Controls
   • Assist with implementing, documenting and maintaining IT controls.
   • Monitor key IT General Controls, including user and privileged access, onboarding and termination, change management, backups, IT operations and data integrity.
   • Perform periodic control reviews and maintain supporting audit evidence.
   • Identify control weaknesses and non-compliance and recommend corrective action.
   • Track audit findings and remediation actions through to closure.
   • Escalate overdue or high-risk findings to the IT Manager and relevant management.
2. IT Governance and Risk Management
   • Assist with identifying, assessing and monitoring IT-related risks.
   • Maintain IT risk, control and compliance registers.
   • Support the development and review of IT policies, procedures and standards.
   • Conduct scheduled compliance reviews against approved controls and policies.
   • Assist with monitoring third-party compliance where IT systems, services or company information are affected.
3. Information Security and Data Protection
   • Monitor compliance with POPIA and Eskort information security requirements.
   • Conduct periodic reviews of user, privileged and system access.
   • Monitor adherence to authentication, password and access-control standards.
   • Review joiner, mover and leaver processes.
   • Assist with monitoring cybersecurity, backup and disaster recovery controls.
   • Support security and compliance investigations and track remediation of identified issues.
4. IT Audits and Reporting
   • Coordinate internal and external IT audit requirements.
   • Gather, organise and maintain supporting audit evidence.
   • Liaise with auditors, IT personnel and relevant business stakeholders.
   • Maintain an audit findings register, including owners, due dates, status and evidence.
   • Follow up and elevate overdue audit actions.
   • Prepare monthly or quarterly compliance reports highlighting key risks, findings and outstanding actions.
5. Policies and Continuous Improvement
   • Maintain the register of IT policies, procedures and standards.
   • Coordinate policy and SOP reviews and updates.
   • Monitor compliance with approved IT policies.
   • Identify opportunities to strengthen controls and improve audit readiness.
   • Assist with IT compliance and information security awareness activities.