Governance, Risk and Compliance (GRC) IM Specialist at Anglo American

Governance, Risk and Compliance (GRC) IM Specialist 

This is 12 month, Fixed-Term Contract position (with potential for extension)

Become an integral part of the Group Finance, Governance Risk & Compliance team who align to the wider functional transformation driving governance and risk management within the context of Johannesburg Stock Exchange (JSE) Regulatory compliance, UK Sarbanes-Oxley (SOX) regulation readiness and process standardisation.

Looking to make an impact? Join our extraordinary team.

Anglo American aspires to become the most valued mining company in the world
We are focused on simplification and standardisation, with the aim of significantly reducing the amount of time our people spend on manually working with data. We want to help our business to meet ambitious targets, so individuals joining us will be equipped with new skills and better tools to provide new insights and further drive business performance.
We're looking for talented people who share our values and who are keen to help us deliver dramatic change. If you have the relevant skills and experience in Information Management - we'd like to hear from you.

This role sits within our Group Finance Business Unit at a Band 6 level

Job Description

As part of this progressive and growing team your role as GRC Information Management Specialist will be to partner with Finance to deliver Governance, Risk and Compliance (GRC) management initiatives within Group Information Management (IM). You will also identify and analyse IM risk and inform management on the status of IM control effectiveness.

Additionally you will;

• Conduct tests, either manually or via data analytics, to provide a view of the adequacy and effectiveness of IM controls, that may include:
  • IT general controls for in-scope JSE/UK SOX systems
  • Application controls in key financial systems
  • Key system generated reports used in the key financial processes referred to as Information Produced by the Entity
• Report on status and drive group standardisation of IM processes and key controls
• Interface with both Finance and IM stakeholders to monitor whether IM matters impacting Finance are appropriately addressed
• Drive the design, implementation and use of continuous control monitoring / data analytics dashboards deployed for finance related processes

Qualifications

• A relevant IT degree
• Professional qualification e.g. CISA or CISSP
• Strong experience in the IM Risk & Compliance environment
• Proven experience as an IT auditor in an audit firm or equivalent corporate experience
• Thorough working knowledge of IT internal audit methodologies and standards, risk methodology, IT governance frameworks and supporting methodologies e.g. Cobit, ISO 27002
• Working knowledge of ERP modules, infrastructure, authorisations, controls and security (e.g. network, cyber, server)
• Knowledge of Group Policies and consistently demonstrates required behaviours and champions safety values