Analyst: IT Governance, Risk & Compliance(IT GRC) at Believe Resourcing

Purpose Of The Position

• The IT GRC Analyst will play a pivotal role in supporting the senior GRC manager in maturing the IT GRC processes and practices by assisting with: (i) IT policies, procedures, and processes; (ii) IT Risk Management; (iii) Assurance Reviews; (iv) various GRC-related projects; (v) Management Reports.

Main Duties And Responsibilities Include

GRC Projects:

• Assist with the scoping, planning, execution and monitoring of certain GRC-related projects.

IT Governance:

• Assist with the definition and implementation of Key Performance Indicators across the ICTS department;
• Assist with the development of RACI matrices for various IT processes;
• Assist with the development and implementation of IT-related policies and procedures.

IT Risk Management for Operational & Project risks – periodic support of:

• Identification & assessment of IT risks
• Monitoring the implementation of risk treatment actions.
• Maintenance of the risk and issues registers
• IT Assurance Management:
• Support of internal audits and assessments against adopted standards (e.g. COBIT, ISO27001 etc.) to assist with compliance management and the improvement of IT / business processes.
• Assist with assurance reviews of IT Projects within the ICTS project office

IT Processes and Controls:

• Support of the design and implementation of IT Processes and Controls within the ICTS department aligned with adopted standards and frameworks.
• Assist with conducting reviews and monitoring compliance with approved business processes and control frameworks within the ICTS department.
• Internal / External Audits:o Co-ordination of activities required to fulfil the requirements of internal and external audits.

Reporting:

• Assist with the ongoing refinement / improvement of GRC-related dashboard reports.
• Assist with the preparation and dissemination of GRC management reports, ensuring deadlines are met.

Requirements

• An Information Systems or IT-related qualification at a minimum NQF level 6 (National Diploma or Advanced Certificate).
• A minimum of 5 years’ relevant IT GRC experience in an enterprise (complex) environment.

A thorough understanding of:

• An IT Governance framework – e.g. COBIT
• an industry-recognised Risk Management framework
• Good English verbal and written, business communication skills
• Proficient in the use of the Microsoft Office suite.

Additional / Advantageous Requirements

• One of the following certifications: M_o_R, CRISC, CGEIT or an IRMSA-endorsed Risk Management certification.
• COBIT Certification (IT Governance & Management Framework)
• Project Management skills and experience in the use of an industry-recognised Project Management methodology.
• Good presentation and facilitation skills.
• Strong planning, organising, and coordinating skills.
• Good inter-personal and relationship-buildi
• Strong negotiation and influencing skills.