Tech GRC Specialist: Governance, Risk & Compliance

Harambee Youth Employment Accelerator; Johannesburg; Hybrid; ZAR 900,000 - 1,300,000; Full time

Job summary

Harambee Youth Employment Accelerator is seeking a Specialist in Technology and Enterprise Governance, Risk and Compliance to strengthen governance, risk, and privacy practices across South Africa and Rwanda. The role covers IT governance, cybersecurity, data privacy, and enterprise controls, reporting to the Lead: Governance, Risk & Compliance.

You will manage risk registers, coordinate audits, and work with stakeholders to address emerging risks and supplier security requirements.

Qualifications

• Bachelor's degree in law, auditing, information systems, cybersecurity, or related field.
• 5+ years in governance, risk, compliance, audit, privacy or security.
• Knowledge of POPIA and Rwanda Data Protection Law.
• Experience with ISO 27001, ISO 31000, COBIT or NIST.
• Strong stakeholder engagement and communication skills.

Responsibilities

• Provide oversight across technology governance, cybersecurity controls, and privacy requirements.
• Monitor regulatory and governance standards and address compliance risks.
• Maintain and strengthen policy governance, ensuring current, fit-for-purpose policies.
• Manage technology and enterprise risk management processes and risk registers.
• Collaborate with stakeholders to identify emerging risks and control weaknesses.
• Support supplier and third-party risk through due diligence and security requirements.
• Coordinate internal audits, cybersecurity assessments, and evidence gathering.
• Oversee audit findings and remediation actions within deadlines.
• Coordinate security reviews, penetration testing, and remediation programs.
• Support privacy initiatives, including cross-border data processing controls.
• Lead security and privacy incident response coordination and reporting.
• Deliver awareness initiatives to grow governance capabilities.

Skills

Governance

Risk management

Compliance

Audit coordination

Privacy operations

Stakeholder engagement

Communication

Education

Bachelor's degree in Law, Auditing, Information Systems, Cybersecurity, or related field

Tools

COBIT

ISO 27001

ITIL

CISA

CISM

Job description

Harambee Youth Employment Accelerator is seeking a Specialist in Technology and Enterprise Governance, Risk and Compliance to strengthen governance, risk, and privacy practices across South Africa and Rwanda. The role covers IT governance, cybersecurity, data privacy, and enterprise controls, reporting to the Lead: Governance, Risk & Compliance.

You will manage risk registers, coordinate audits, and work with stakeholders to address emerging risks and supplier security requirements.