IT Risk Officer

Rhodes University; Wes-Kaap; On-site; ZAR 450,000 - 600,000; Full time

Job summary

Rhodes University is seeking an experienced IT Risk Officer to support information security, risk governance and compliance activities within the organisation. The role involves identifying and managing security risks, supporting regulatory requirements, and ensuring controls and processes are maintained.

The successful candidate will assist with risk assessments, implement monitoring of security controls, and collaborate with internal stakeholders to address security and regulatory needs.

Qualifications

• Relevant tertiary qualification in IT, Information Security, Risk, Compliance, or a related field.
• Relevant security, risk, or compliance certifications.
• 3–5 years' relevant experience within information security, risk, governance, compliance, or a related environment.
• Experience conducting risk assessments.
• Knowledge and practical understanding of POPIA.
• Exposure to regulatory and compliance requirements.
• Understanding of information security principles and controls.
• Experience working with security policies, standards, or governance processes.
• Strong analytical and problem-solving skills.
• Good communication and stakeholder management skills.
• Strong attention to detail and documentation skills.
• Experience working within a regulated organisation.

Responsibilities

• Conduct information security and risk assessments.
• Identify, assess, and document security and operational risks.
• Support the implementation and monitoring of security controls.
• Assist with security governance, risk, and compliance activities.
• Support compliance with POPIA and other applicable regulatory requirements.
• Review processes and systems to identify potential security or compliance gaps.
• Maintain security and risk documentation.
• Track identified risks and remediation activities.
• Assist with internal and external audits where required.
• Work with internal stakeholders to address security and compliance requirements.
• Support the development and maintenance of security policies, standards, and procedures.
• Keep up to date with relevant security, privacy, and regulatory developments.

Skills

Information security

Risk assessment

Governance & compliance

POPIA knowledge

Stakeholder management

Documentation

Analytical thinking

Education

IT/Information Security related degree

Job description

Role Overview

We are looking for an experienced IT Risk Officer to support information security, risk, governance, and compliance activities within the organisation.

The successful candidate will assist with identifying and managing security risks, supporting regulatory requirements, and ensuring appropriate security controls and processes are maintained.

Key Responsibilities

• Conduct information security and risk assessments.

• Identify, assess, and document security and operational risks.

• Support the implementation and monitoring of security controls.

• Assist with security governance, risk, and compliance activities.

• Support compliance with POPIA and other applicable regulatory requirements.

• Review processes and systems to identify potential security or compliance gaps.

• Maintain security and risk documentation.

• Track identified risks and remediation activities.

• Assist with internal and external audits where required.

• Work with internal stakeholders to address security and compliance requirements.

• Support the development and maintenance of security policies, standards, and procedures.

• Keep up to date with relevant security, privacy, and regulatory developments.

Requirements

• Relevant tertiary qualification in IT, Information Security, Risk, Compliance, or a related field.

• Relevant security, risk, or compliance certifications.
  

• 3–5 years' relevant experience within information security, risk, governance, compliance, or a related environment.

• Experience conducting risk assessments.

• Knowledge and practical understanding of POPIA.

• Exposure to regulatory and compliance requirements.

• Understanding of information security principles and controls.

• Experience working with security policies, standards, or governance processes.

• Strong analytical and problem-solving skills.

• Good communication and stakeholder management skills.

• Strong attention to detail and documentation skills.

• Experience working within a regulated organisation.