IT Governance, Risk and Compliance Specialist

Sabenza IT & Recruitment; Johannesburg; On-site; ZAR 600,000 - 900,000; Full time

Job summary

A leading company in Johannesburg is seeking an experienced IT Governance, Risk, and Compliance Specialist. This role involves developing governance strategies, implementing compliance initiatives, and ensuring alignment with legal and regulatory obligations. Candidates should hold a degree in IT and have at least 5 years of experience in a similar role, with strong skills in IT governance frameworks and risk management methodologies.

Qualifications

• Minimum of 5 years’ experience in a similar IT GRC role.
• Strong understanding of IT governance frameworks and risk management methodologies.

Responsibilities

• Develop and implement a comprehensive IT Governance strategy.
• Drive implementation of key governance frameworks such as COBIT and ITIL.
• Prepare stakeholder communication plans in response to cybersecurity events.

Skills

IT Governance

Risk Management

Compliance

Education

Bachelor’s Degree in Information Technology

Job description

We are looking for a proactive and experienced IT Governance, Risk, and Compliance (GRC) Specialist to lead the development and implementation of governance strategies, risk management frameworks, and compliance initiatives across the IT landscape. The ideal candidate will possess a strong understanding of IT frameworks and regulatory requirements, and demonstrate the ability to embed governance principles into the organization’s IT operations effectively.

Key Responsibilities

Develop and implement a comprehensive IT Governance strategy aligned with organizational goals.

Define, document, and roll out IT GRC policies, procedures, and processes.

Drive implementation and adoption of key governance frameworks such as COBIT, ITIL, ISO, NIST, SABSA, PRINCE II, and CMM.

Implement IT controls aligned with business risks, legal and regulatory obligations, and industry best practices.

Develop, monitor, and report on IT governance metrics, KPIs, and performance indicators.

Support IT alignment activities and contribute to governance committee submissions and reviews.

Assist IT teams in developing and maintaining incident response plans.

Prepare stakeholder communication plans in response to cybersecurity events.

Maintain up-to-date documentation of all IT GRC activities and processes.

Design and monitor reporting mechanisms for IT Governance, Risk, and Audit, to support ongoing compliance.

Ensure accurate and timely reporting to regulatory bodies when required.

Qualifications & Experience

Bachelor’s Degree in Information Technology, Information Systems, or related field.

Minimum of 5 years’ experience in a similar IT GRC role.

Strong understanding of IT governance frameworks and risk management methodologies.

Certifications (Advantageous)

CGEIT – Certified in the Governance of Enterprise IT

CRISC – Certified in Risk and Information Systems Control

CISA – Certified Information Systems Auditor

GIAC – Global Information Assurance Certification

Hit apply today for more information!

Requirements