IT GRC Governance & Compliance Lead

NTT DATA, Inc.; Johannesburg; Sur place; ZAR 900 000 - 1 200 000; Plein temps

Résumé du poste

NTT DATA, Inc. in Johannesburg is seeking an IT GRC Governance Compliance Specialist to develop and implement IT governance frameworks aligned with international standards and regulatory requirements.

You will manage IT audits, monitor risks, maintain documentation, and report on IT governance metrics while collaborating with multiple IT teams. This role requires strong knowledge of COBIT, ISO, NIST, and POPIA compliance, plus experience leading certification audits such as ISO27001.

Qualifications

• Matric and a degree in IT or related field.
• 8 years experience in a similar role.
• CGEIT, CRISC, CISA and GIAC certifications are advantageous.

Responsabilités

• Develop and implement IT GRC strategy.
• Development and implementation of IT Governance, risk management and compliance policies, processes and procedures; embed frameworks (COBIT, ITIL, ISO, NIST, SABSA, PRINCE II, CMM).
• Implement IT controls in alignment with risk, regulatory requirements and industry trends.
• Develop, monitor and report on IT governance metrics and performance indicators.
• Assist in maintaining IT alignment activities and report submissions across governance committees.
• Assist IT departments with development and maintenance of incident response plans.
• Prepare stakeholder communications in response to cyber security incidents.
• Maintain accurate IT GRC documentation.
• Establish processes for continuous monitoring and IT audit and risk reporting.
• Develop an IT risk profile for the university in alignment with the risk management framework.
• Conduct internal risk assessments across IT departments and track access reviews, information security maturity, and IT audits.
• Lead preparations and facilitate audits for IT certifications such as ISO27001.
• Maintain and drive mitigation controls of the IT Risk Register.
• Continuously analyse effectiveness of IT and information security controls.
• Collaborate with internal stakeholders to perform risk analysis on third-party hosted information.
• Ensure visibility of audit and risks to relevant committees.
• Facilitate IT disaster recovery and business continuity testing.
• Assess the adequacy of IT and information security.
• Coordinate and support internal and external compliance audits.
• Oversee regulatory compliance with POPIA and other standards.

Connaissances

IT GRC

Risk management

Compliance

Audit coordination

Cyber security

Formation

Matric

Degree in IT or related field

Outils

COBIT

ISO

NIST

ITIL

Description du poste

NTT DATA, Inc. in Johannesburg is seeking an IT GRC Governance Compliance Specialist to develop and implement IT governance frameworks aligned with international standards and regulatory requirements.

You will manage IT audits, monitor risks, maintain documentation, and report on IT governance metrics while collaborating with multiple IT teams. This role requires strong knowledge of COBIT, ISO, NIST, and POPIA compliance, plus experience leading certification audits such as ISO27001.