Head: Enterprise Governance & Risk (10048) at The South African Revenue Service (SARS)

Job Purpose

• The Head of Governance and  Risk (GR) will lead the development and implementation of SARS’ GR strategy. This role is critical in ensuring that the enterprise operates within legal and regulatory frameworks, manages risks effectively, and maintains exemplary standards of governance.
• To develop, implement and position the GRC (Governance, Risk and Compliance) value chain, operating model and frameworks within the SARS enterprise strategy to support optimised performance, to ensure all statutory and legislative requirements and obligations are met, in order to position and enable horizontal alignment, implementation and adoption.

Education and Experience

Minimum Qualification & Experience Required

• A relevant Master’s or Honours degree is preferable with 8-12 years experience in Corporate Governance, Risk and Compliance (GRC) of which at least 5 years at senior management level.

ALTERNATIVE #

• A Bachelor's Degree may be considered, provided at least 10 years’ experience in GRC can be demonstrated and at least 5 years at senior management level.

Job Outputs:

Strategic focus

• The Head: Governance and Risk (GR) is responsible for overseeing SARS’ governance, risk management, and compliance functions.

Strategy development and implementation:

• Provide expert leadership and strategic direction regarding SARS' GRC framework including oversight of corporate compliance, governance, risk, policies and practices and ethical standards to assure integrity of the organisation's total operations.
• Align and integrate a comprehensive, holistic GRC strategy within the enterprise's overarching strategy and objectives. Develop a risk management strategy that encompasses global and local standards to ensure risks are managed, identified, mitigated, monitored and reported effectively. Develop and implement an enterprise-wide governance framework to ensure compliance with regulatory requirements, benchmarked standards / frameworks (both local and global) and industry related standards. Lead, develop and implement the Enterprise Information Security framework. Lead and oversee the governance management function within the Enterprise Risk Management department, ensuring alignment with the company's risk management framework.
• Develop a GRC functional operating model and align value chain to organisational objectives in partnership with relevant stakeholders. Develop annual and longer-term resource plan as well as functional plans with clear measurable milestones and priorities and secure capacity to achieve objectives consistent with long term strategic plan.
• Ensure that appropriate control measures are introduced to address matters raised by the Auditor General during the external audit process.
• Responsible for quarterly reporting to the Audit and Risk Committee within the approved GRC reset model and framework.
• Use insights and  knowledge gained from high level reports to conduct abstract, conceptual and  comparative analysis to define and renew functional strategy aligned to SARS enterprise strategy and plans.
• Provide authoritative advice and guidance that supports the realisation of major organisational objectives in line with the SARS mandate and higher purpose.
• Interpret internal and external organisational changes, model change impact scenarios and introduce or adapt systems in alignment with strategic intent.
• Proactively identify interconnected problems, model alternative solutions, develop and establish contingency plans aligned to the  enterprise, portfolios and divisional direction.
• Leadership: Lead and mentor the GRC team, fostering a culture of compliance and risk awareness throughout the organization.
• Communicate a meaningful strategic context that articulates GRC functional purpose in relation to the organisational mandate, vision, purpose and philosophy.

Process

• The successful candidate will play a pivotal role in managing governance, risk and compliance frameworks, ensuring robust, integrated GRC management across the enterprise, within business areas and across the regions.
• Create the context to continuously improve all functions and systems in line with national, regional and international changes.
• Advise business on the governance framework and obligations, compliance strategies and existing and emerging risks to support strategic decision processes and critical issues response.
• Be involved in identifying and mitigating of real and/or potential risks in new technology driven processes and activities, in a context of limited precedence and exposure.
• Scan external environment, identify benchmarks and develop alternative operating plans or models to deliver competitive advantage.
• Stakeholder Engagement: Collaborate with internal and external stakeholders to promote best practices in governance, risk management, and compliance.
• Act as the primary committee coordinator for enterprise-wide GRC committees, ensuring the documentation and facilitation of credible challenge at the committee level and facilitating effective portfolio and cluster GRC committee functioning.
• Be responsive to change in order to influence and effectively manage associated functional acceptance.
• Responsible for Risk Management:
• Identify, assess, and manage risks across the organization.
• Develop risk mitigation strategies and ensure effective risk controls are in place.
• Monitor and report on risk exposure and the effectiveness of risk management strategies.
• Manage the preparation and distribution of materials for risk management committees, ensuring timely, accurate, and comprehensive information for discussion and decision-making.
• Establish and maintain a policy management framework to ensure that risk policies are current, well-documented, and effectively communicated across the organization.
• Provide strategic leadership in documenting and escalating risk-related issues and challenges to senior leadership and relevant risk committees.

Responsible for Governance

• Governance: Develop and oversee the implementation of governance frameworks, policies, and procedures to ensure accountability and transparency.
• Collaborate with senior leaders across various business units and regions to ensure governance standards are upheld and concomitant risks are  addressed.
• Drive the development and maintenance of cross business and regions governance structures that support effective decision-making and oversight of key risk activities.
• Drive the development and implementation of integrated governance, risk and compliance frameworks.
• Facilitate the review and update of governance frameworks, charters, and mandates to ensure these are responsive to regulatory requirements and internal risk strategies.

Integration of Compliance:

• Ensure compliance with regulatory requirements related to governance, risk, and policy management.
• Ensure the organization complies with all relevant laws, regulations, and internal policies.
• Conduct regular compliance audits and assessments.
• Develop and implement compliance training programs for employees.

Reporting and Analysis:

• Prepare and present reports on governance, risk, and compliance activities.
• Analyse data to identify trends and areas for improvement.

People

• Provide leadership and direction by reinforcing the vision and focus for the GRC function.
• Inspires, motivates, leads and manages the team.
• Influence the development of clear human capability and accountability frameworks within functional area in support of people management strategies.
• Create a positive organisational climate and culture to energise and focus the function in order to optimise short term and longer-term productivity.
• Communicate strategic context that guide best practice, foster an environment of continuous learning and improved employee engagement levels.
• Performance Management of staff for effective Employee Engagement and Performance Excellence
• Engagement with internal and external stakeholders to ensure effective management of interrelated and cross functional work.
• Promote continuous improvement and professional development within the team.

Finance

• Ensure that the functional strategy is adequately budgeted for through the development and implementation of a detailed budget.
• Implement effective financial control and management in the different functional areas.
• Prepares Business Unit Resource plan.
• Accountable for the effective management of all financial and material resources within the Business Unit.
• Effective systems and platforms identification to ensure a seamless future fit EGRC function.
• Manage vendors’ and suppliers’ budget and service delivery aligned to contract requirements.

Governance

• Oversee the creation and maintenance of policies and procedures that promote effective governance within the GRC function.
• Lead  the design and implementation of SARS’ Governance Framework to enable effective delivery of its organisational policy objectives.
• Ensure the consolidation of the risk profile for the area of accountability, manage critical risks and ensure feedback integration.
• Complies with all requirements of PFMA, relevant National Treasury, regulatory / legislative requirements and SARS policies and mandate.
• Ensure compliance with record management processes, destruction and storage of records aligned to legislation.

Client

• Define and influence service level agreements with internal and external stakeholders.
• Ensure strategic representation of SARS and promote the enterprise with public service leaders and national, regional stakeholders.
• Build strong relationships with internal and relevant external stakeholders.
• Develop effective service level agreements with identified divisions and stakeholders to ensure delivery of measurable strategic objectives and customer satisfaction.