Senior ICT Governance & Cyber Risk Lead

CapeNature; Wes-Kaap; On-site; ZAR 700,000 - 1,100,000; Full time

Benefits offered by this job

24 days annual leave

Pension fund benefits

Staff discounts on CapeNature accomod

Education support

Wellness program

Environment impact

Job summary

CapeNature is seeking a results-driven ICT Governance, Risk and Compliance professional to join our Head Office team in Bridgetown, Cape Town on a 5-year fixed-term contract. The role focuses on monitoring ICT standards and cybersecurity controls, aligning practices with regulatory and business objectives while driving continuous improvement across the ICT department.

You will develop and maintain policy frameworks, lead risk assessments, coordinate audits, manage incident response, and report

Qualifications

• NQF level 6 or equivalent in Computer Science/IT or Auditing.
• COBIT foundations certificate or CISA certification.
• Other ISACA qualifications will be an advantage (CGEIT, CISM, CRISC, COBIT).
• 2 years’ experience in ICT Governance, risk and compliance or auditing of ICT environments.
• Experience with industry frameworks (ISO 27001/2 and ISO9000, ITIL).

Responsibilities

• Develop and maintain ICT policies/standards/guidelines to control risks and operate ICT effectively.
• Monitor external standards and risk trends to keep internal ICT practices up-to-date.
• Create templates and standards for ICT adoption.
• Develop and implement information security policies, standards and procedures.
• Keep policy taxonomy updated and meet AGSA review requirements.
• Coordinate ICT governance risk reporting and communications.
• Lead disaster recovery framework design and documentation.
• Ensure audits and governance training are planned and delivered.
• Identify gaps in ICT controls and monitor vendor governance and SLAs.
• Oversee project governance and gate reviews.
• Lead incident response planning and execution, ensuring regulatory requirements are met.

Skills

ICT Governance

Risk Management

Compliance

Auditing

Policy Development

Stakeholder Communication

Education

NQF level 6 or equivalent in Computer Science/Information Technology/Auditing

COBIT Foundation certificate

CISA certification

ISACA certifications (CGEIT/CISM/CRISC/COBIT) advantageous

Job description

CapeNature is seeking a results-driven ICT Governance, Risk and Compliance professional to join our Head Office team in Bridgetown, Cape Town on a 5-year fixed-term contract. The role focuses on monitoring ICT standards and cybersecurity controls, aligning practices with regulatory and business objectives while driving continuous improvement across the ICT department.

You will develop and maintain policy frameworks, lead risk assessments, coordinate audits, manage incident response, and report