Deputy Director: Risk and Compliance at Department of Trade, Industry and Competition

REQUIREMENTS :

• A qualification at NQF Level 7 in Computer Science / Informatics or relevant qualifications. 3-5 years relevant managerial experience in the ICT industry in public and private environment.

Requirements:

• Experience developing and implementing IT governance frameworks, policies and implementation plans.
• Experience in ICT service continuity and disaster recovery planning and testing. Experience identifying and managing compliance with external legal, regulatory and industry standards. Experience preparing for and managing internal and external ICT audits and maintaining audit registers.
• Experience managing ICT change processes, impact assessments and emergency changes. Experience conducting IT risk assessments and developing/implementing risk mitigation strategies.

DUTIES :

• ICT Governance Framework: Develop IT governance frameworks and policies and produce implementation plans. Conduct annual assessments on implementation progress and review ICT policies, procedures and controls. Monitor the functioning of governance committees such as ICT Steering Committee and Change Control Board.
• ICT Service Continuity: Develop and maintain the ICT Service Continuity Management Plan aligned to the Business Continuity Plan. Coordinate Disaster Recovery / ITSCM testing and report on outcomes. Identify gaps in continuity processes and provide training and awareness.
• Compliance with Internal and External Requirements: Identify applicable external legal, regulatory and industry requirements and monitor departmental compliance. Manage and prepare for internal and external audits and maintain the audit register. Promote a culture of ethical conduct and monitor corrective action on audit findings.
• ICT Change Management: Manage ICT system changes ensuring alignment with governance, risk and compliance requirements. Implement change management procedures, conduct impact assessments and manage emergency changes.
• ICT Risk Management: Conduct regular IT risk assessments to identify and analyse potential threats and maintain the IT risk register. Monitor emerging IT risks and develop and implement mitigation strategies. Monitor effectiveness of risk mitigation measures and report on progress. Integrated Reporting: Coordinate inputs into monthly, ICT Steering Committee, quarterly and annual reports. Produce reports on Disaster Recovery/ITSCM testing and report on progress addressing audit findings and risks.
• Report regularly on ICT changes implemented. Sub-directorate Management. Provide inputs into strategic planning and operational plans and implement sub-unit plans Facilitate knowledge transfer, manage financial resources and assets of the unit. Supervise and develop staff and ensure performance management processes are completed