Specialist: Ict, Risk And Compliance

Border Management Authority; Gauteng; On-site; ZAR 600,000 - 850,000; Full time

Job summary

Border Management Authority is seeking an ICT governance and assurance professional to oversee internal and external ICT audits, compliance reviews, and risk monitoring across ICT domains in Gauteng. You will coordinate audit responses, monitor remediation actions, and ensure alignment with ICT policies and CGICTPF standards, engaging with stakeholders to drive timely closure of issues.

Successful candidates will report on trends, manage third-party risk, and support governance committees with

Responsibilities

• Coordinate ICT internal and external audits.
• Coordinate audit management responses and evidence submissions.
• Monitor implementation of ICT audit recommendations and corrective actions.
• Conduct compliance reviews against approved ICT policies, standards and procedures, excluding specialist identity, endpoint and third-party assurance reviews covered under separate KPAs.
• Report audit and compliance trends, control weaknesses and remediation status to management.
• Develop, implement and maintain ICT governance frameworks to support effective ICT oversight and decision-making.
• Develop, review and maintain ICT security policies, standards, procedures and guidelines.
• Maintain the ICT policy and governance artefact register in line with approved review cycles.
• Ensure ICT governance alignment with the Corporate Governance of ICT PolicyFramework (CGICTPF) and relevant standards.
• Advise stakeholders on governance requirements for embedding ICT controls into business processes.
• Review third-party ICT security assurances during onboarding, contract renewal or material service changes.
• Coordinate supplier ICT security, privacy and compliance reviews.
• Track third-party ICT risk issues, control gaps and supplier remediation actions.
• Monitor applicable ICT security SLA and assurance obligations related to suppliers.
• Develop and maintain the ICT risk management process and ICT risk register.
• Facilitate ICT risk assessments across relevant ICT domains and initiatives.
• Develop and coordinate risk mitigation strategies and treatment plans for identified ICT risks.
• Monitor implementation of ICT risk treatment actions and escalate overdue or high-risk items.
• Support enterprise risk reporting by providing ICT risk inputs and status updates.
• Support the monitoring of identity and access management controls, including user access reviews, privileged access and account lifecycle processes.
• Coordinate basic endpoint security compliance checks against approved ICT security standards and baseline requirements.
• Track and report exceptions relating to access control, endpoint protection, patching, malware protection and device configuration compliance.
• Escalate identified ICT security control weaknesses for remediation and management reporting.
• Coordinate and consolidate ICT governance, risk, compliance and security inputs for management and governance structures.
• Coordinate submission of ICT Steering Committee, Internal Audit Committee and Audit and Risk Committee reports.
• Facilitate stakeholder engagements on ICT governance, risk, compliance and security matters.
• Track committee decisions, stakeholder inputs and cross-functional commitments until closure.
• Maintain consistent stakeholder communication on ICT governance matters without duplicating technical ownership assigned to other KPAs.

Job description

The successful candidate will be expected to perform the following duties and responsibilities:

ICT Assurance and Compliance Monitoring.

• Coordinate ICT internal and external audits.
• Coordinate audit management responses and evidence submissions.
• Monitor implementation of ICT audit recommendations and corrective actions.
• Conduct compliance reviews against approved ICT policies, standards and procedures, excluding specialist identity, endpoint and third-party assurance reviews covered under separate KPAs.
• Report audit and compliance trends, control weaknesses and remediation status to management.

ICT Governance Framework

• Develop, implement and maintain ICTgovernance frameworks to support effectiveICT oversight and decision-making.
• Develop, review and maintain ICT security policies, standards, procedures and guidelines.
• Maintain the ICT policy and governance artefact register in line with approved review cycles.
• Ensure ICT governance alignment with theCorporate Governance of ICT PolicyFramework (CGICTPF) and relevantstandards.
• Advise stakeholders on governancerequirements for embedding ICT controls intobusiness processes.

Third-party risk and assurance

• Review third-party ICT security assurancesduring onboarding, contract renewal ormaterial service changes.
• Coordinate supplier ICT security, privacy andcompliance reviews.
• Track third-party ICT risk issues, control gapsand supplier remediation actions.
• Monitor applicable ICT security SLA andassurance obligations related to suppliers.

ICT Risk Management.

• Develop and maintain the ICT risk management process and ICT risk register.
• Facilitate ICT risk assessments across relevant ICT domains and initiatives.
• Develop and coordinate risk mitigation strategies and treatment plans for identified ICT risks.
• Monitor implementation of ICT risk treatment actions and escalade overdue or high-risk items.
• Support enterprise risk reporting by providing ICT risk inputs and status updates.

ICT Security, Identity and Endpoint Control Monitoring

• Support the monitoring of identity and access management controls, including user access reviews, privileged access and account lifecycle processes.
• Coordinate basic endpoint security compliance checks against approved ICT security standards and baseline requirements.
• Track and report exceptions relating to access control, endpoint protection, patching, malware protection and device configuration compliance.
• Escalate identified ICT security control weaknesses for remediation and management reporting.

ICT Governance Stakeholder Engagement and Reporting

• Coordinate and consolidate ICT governance, risk, compliance and security inputs for management and governance structures.
• Coordinate submission of ICT Steering Committee, Internal Audit Committee and Audit and Risk
• Committee reports.
• Facilitate stakeholder engagements on ICT governance, risk, compliance and security matters.
• Track committee decisions, stakeholder inputs and cross-functional commitments until closure.
• Maintain consistent stakeholder communication on ICT governance matters without duplicating technical ownership assigned to other KPAs.