IT Governance, Risk and Compliance Manager

Impronics Technologies; Gauteng; On-site; ZAR 700,000 - 1,100,000; Full time

Job summary

Impronics Technologies is looking for an IT Governance, Risk and Compliance Manager in Johannesburg, South Africa. The successful candidate will lead the establishment of a robust IT GRC framework to ensure the integrity and confidentiality of information assets. Responsibilities include developing IT governance policies, managing IT risks, ensuring compliance with regulations such as GDPR and POPIA, and presenting reports to senior management. Ideal candidates should possess a degree in IT or related fields and have relevant certifications and experience in the financial services industry.

Qualifications

• 5-7 years of experience in IT governance, risk management, and compliance in financial services.
• In-depth knowledge of IT governance frameworks like COBIT and ITIL.
• Excellent analytical and problem-solving abilities.

Responsibilities

• Establish and maintain IT governance frameworks and policies.
• Identify and prioritize IT risks, implement mitigation strategies.
• Ensure compliance with laws and standards, conduct audits.

Skills

IT governance frameworks knowledge

Risk management

Regulatory requirements in South Africa

Analytical skills

Communication skills

Education

Bachelor’s degree in Information Technology or related field

Master’s degree is a plus

Professional certifications (CISA, CISM, CISSP, CRISC)

Job description

IT Governance, Risk and Compliance Manager

5-7 years

South Africa, Johannesburg

Full-Time

Job Mission / Objective

The IT Governance, Risk and Compliance Manager will be responsible for establishing and maintaining a robust IT GRC framework that ensures the integrity, confidentiality, and availability of Access Bank’s information assets. This role involves developing policies, procedures, and controls to manage IT risks, ensure compliance with regulatory requirements, and align IT strategies with the bank’s overall objectives.

Main Responsibilities

Governance

Develop and implement IT governance frameworks and policies to ensure alignment with business objectives and regulatory requirements. Establish and enforce IT standards and practices to ensure the effective and efficient use of IT resources. Coordinate with senior management to integrate IT governance into the overall corporate governance framework.

Identify, assess, and prioritize IT risks, including cybersecurity threats, data breaches, and operational risks. Develop and implement risk mitigation strategies and action plans. Monitor and report on the effectiveness of risk management initiatives and controls.

Compliance

Ensure IT operations comply with relevant laws, regulations, and standards, including GDPR, POPIA, and industry best practices. Conduct regular audits and assessments to ensure adherence to compliance requirements. Coordinate with internal and external auditors and manage audit findings and remediation efforts.

Policy Development and Implementation

Develop, review, and update IT policies and procedures to ensure they remain current and effective. Communicate and train staff on IT governance, risk management, and compliance policies and procedures.

Reporting and Documentation

Prepare and present regular reports to senior management on IT GRC activities, risks, and compliance status. Maintain comprehensive documentation of IT GRC processes, policies, and procedures.

Stay abreast of industry trends, emerging threats, and regulatory changes. Recommend and implement improvements to the IT GRC program to enhance the bank’s security posture and compliance status.

Academic Knowledge: Bachelor’s degree in Information Technology, Computer Science, or a related field. A Master’s degree is a plus. Professional certifications such as CISA, CISM, CISSP, or CRISC. Foreign Languages: N/A

Work Experience: Minimum of 5-7 years of experience in IT governance, risk management, and compliance within the financial services industry. In-depth knowledge of IT governance frameworks (e.g., COBIT, ITIL), risk management methodologies, and compliance standards.

Skills / Specialized Know How: Strong understanding of regulatory requirements in South Africa, including POPIA and other relevant laws. Excellent analytical, problem-solving, and decision-making skills. Strong communication and interpersonal skills, with the ability to interact effectively with stakeholders at all levels. Proven ability to lead and manage cross-functional teams and projects.