IT Governance Manager

Clicks Group Limited; Cape Town; Vor Ort; ZAR 1.200.000 - 1.800.000; Vollzeit

Zusammenfassung

Clicks Group Limited seeks an experienced IT Governance Manager to lead the governance, risk and compliance framework across the Group and its entities. You will ensure effective risk management, control assurance, audit readiness, and third-party technology risk oversight.

Reporting to the IT Governance & Security Executive, you will collaborate with Cyber Security, technology leadership and assurance functions to strengthen regulatory compliance and governance across SAP environments and cloud

Qualifikationen

• A degree in Information Technology, Information Systems, Computer Science, Commerce or Risk Management, or a relevant equivalent qualification.
• Relevant certifications such as CGEIT, CISA, CRISC, COBIT, ITIL, ISO 27001 Lead Implementer or Lead Auditor, or CDMP will be an added advantage.
• Strong technical competency across IT governance, risk or audit within a complex enterprise.
• Minimum 5 years of IT governance, risk or audit experience, including at least 2 years in people management.
• Strong knowledge of King V, COBIT, ITIL, ISO 27001 and NIST frameworks, and data governance principles.

Aufgaben

• Develop and implement the Group IT governance strategy and framework across Clicks, UPD and other Group entities.
• Manage internal and external IT audits and compliance activities (ISAE 3402, PCI DSS, SOC 2) and drive remediation.
• Oversee IT governance and controls, including SAP S/4HANA access, change and authorisation controls, vendor-managed systems.
• Establish and oversee Group IT change and release governance and service continuity governance.
• Embed governance, risk, security and control requirements into technology projects and major implementations.

Kenntnisse

Technical governance

Risk assessment

Stakeholder engagement

IT auditing

Project management

Ausbildung

Degree in IT/IS/CS/Commerce or Risk Mgmt

IT governance certifications (CGEIT, CISA, CRISC, COBIT, ITIL, ISO27001 Lead Implementer/Auditor, CDMP)

Tools

SAP S/4HANA access controls

COBIT framework

ISO 27001

NIST

Jobbeschreibung

INTRODUCTIONWe are seeking an experienced and technically competent IT Governance Manager to lead the IT Governance, Risk and Compliance (GRC) framework across the Group, including UPD and other Group entities. The role covers IT risk, data governance, audit and compliance, change and release management, service continuity, disaster recovery and third-party risk, and requires the technical depth to challenge technology teams, architecture and controls credibly.JOB PURPOSETo design, implement and continuously improve the Group's IT Governance, Risk and Compliance framework, operating model, policies and controls across Clicks Group, including UPD and other Group entities, aligned with King V, business objectives and the Group's risk appetite.The role provides technically credible oversight and challenge of technology risks, architecture, controls and operational practices, ensuring effective risk management, control assurance, audit readiness, resilience governance and third-party technology risk management.Reporting to the IT Governance & Security Executive, the incumbent works collaboratively with the Cyber Security Manager, technology leadership, business stakeholders and assurance functions to strengthen accountability, regulatory compliance and sustainable control effectiveness.

RESPONSIBILITIES

Governance and Policy

• Develop and implement the Group IT governance strategy and framework across Clicks, UPD and other Group entities, aligned with King V, COBIT, ISO/IEC 38500, risk appetite and regulatory requirements.
• Act as custodian of Group IT policies, standards and procedures, managing review cycles, version control, approval and publication.
• Support the ISO/IEC 27001 and NIST-aligned ISMS with the Cyber Security Manager, aligning technology risk, control assurance and reporting.
• Set governance requirements for emerging technologies, including AI, cloud and automation, covering risk, data protection and acceptable use.
• Establish data governance requirements, including ownership, classification, quality and lifecycle, with business and technology data owners.

Risk, Audit and Controls

• Run IT risk forums and maintain the consolidated IT risk register in line with enterprise risk management, including formal risk acceptances and policy exceptions with compensating controls and review dates.
• Manage internal and external IT audits and compliance activities (e.g. ISAE 3402, PCI DSS and SOC 2) as primary auditor liaison, validating evidence, challenging unsupported findings and driving timely remediation through combined assurance.
• Manage the quarterly IT General Controls self-assessment, including risk and control matrices, control owner evidence, and design and operating effectiveness testing, supporting the Group’s internal financial controls assurance.
• Oversee IT governance and controls, including SAP S/4HANA access, change and authorisation controls, vendor-managed systems and audit readiness.

Change, Projects and Resilience

• Establish and oversee Group IT change and release governance, ensuring that technology changes are appropriately risk-assessed, authorised, tested, implemented and evidenced.
• Oversee IT service continuity and disaster recovery governance, ensuring critical technology services have defined recovery objectives, documented recovery arrangements, tested capabilities and appropriate remediation of identified weaknesses.
• Embed governance, risk, security and control requirements into technology projects, major implementations and acquisitions from inception.

Suppliers and Procurement

• Oversee IT procurement governance, including contract and licensing standards and transparent RFP, RFQ and RFI evaluation.
• Manage vendor contracts, performance and risk, including review of third‑party assurance reports and oversight of managed service provider access.

Data Governance

• Establish and oversee technology‑related data governance and control requirements in collaboration with business data owners, the Data & Intelligence function, Information Security and Privacy, covering data classification, access, protection, retention, lifecycle and control assurance.

Architecture and technology governance

• Participate in technology architecture and investment governance forums, assessing material risks associated with architecture decisions, technology standards, integration, security, resilience, technical debt, scalability and third‑party dependencies. Ensure deviations from approved standards are documented, risk‑assessed, authorised and periodically reviewed.

Reporting and People

• Define IT governance KPIs and risk indicators, and coordinate reporting to executive management, the Audit and Risk Committee and the Board.
• Lead, develop and performance‑manage the IT Governance team, including change and release and service continuity staff, ensuring adequate capacity and skills.
• Support governance budgeting and build risk and control awareness among technology teams and control owners.
• Establish and oversee technology third‑party risk and assurance requirements, including supplier due diligence, security and compliance assessments, contractual control obligations, third‑party assurance reporting, managed service provider access and ongoing risk monitoring.
• Provide governance oversight of IT procurement processes, including compliance with approved procurement policies, evaluation standards, licensing controls and technology risk requirements

JOB OBJECTIVES

Ensure consistent IT Governance across Clicks Group and its entities; strengthen technology risk, control and compliance management; improve audit readiness and remediation; and support resilient, accountable and well‑governed technology operations.

QUALIFICATIONS

A degree in Information Technology, Information Systems, Computer Science, Commerce or Risk Management, or a relevant equivalent qualification.

Relevant certifications such as CGEIT, CISA, CRISC, COBIT, ITIL, ISO 27001 Lead Implementer or Lead Auditor, or CDMP will be an added advantage.

JOB-RELATED KNOWLEDGE & EXPERIENCE

Strong technical competency is essential, with the ability to assess enterprise infrastructure, applications, cloud services, identity and access management, architecture and control evidence.

Minimum 5 years of relevant IT experience, including IT governance, risk or audit in a complex enterprise, and at least 2 years managing a team.

Strong knowledge of King V and recognised IT Governance, risk and security frameworks, including COBIT, ITIL, ISO 27001 and NIST, together with data governance principles and practices.

Strong understanding of regulatory and compliance requirements, including POPIA, PAIA and PCI DSS, and of Information Regulator reporting obligations.

Proven track record in designing, implementing and testing IT General Controls and application controls, preferably in SAP environments, and in managing audit findings through to sustainable closure.

Experience providing IT Governance oversight across multiple business units, divisions or legal entities.

JOB-RELATED SKILLS

Ability to translate technical weaknesses into clear business risks, governance requirements and actions.

Excellent written, verbal, presentation and report‑writing skills.

Ability to collaborate across functions and Group entities and to influence senior stakeholders, auditors and suppliers.

Sound analytical judgement and the ability to manage ambiguity and complexity when assessing technical and governance information.

Strong planning and project management skills, with the ability to run multiple audits, self‑assessments and remediation plans to deadline.

JOB-RELATED COMPETENCIES

• Leading and Supervising
• Delivering Results and Meeting Customer Expectations
• Relating and Networking
• Applying Expertise and Technology
• Adapting and Responding to Change
• Deciding and Initiating Action
• Presenting and Communicating Information