ICT Governance Officer (Level 9), Head Office - Bridgetown at CapeNature

RESPONSIBILITIES:

Key Performance Area: ICT policy framework and management

• Develop and maintain ICT policies/standards/guidelines designed to establish controls to address risks, and operate ICT effectively and efficiently
• Monitor external standards and risk/control trends to determine if internal ICT practices are contemporary with industry, regulatory and/or business expectations.
• Create any required templates and standards to be adopted by ICT
• Develop and implement information security policies, standards, and procedures
• Keep the CapeNature policy taxonomy updated and ensure AGSA review requirements are met.

Key Performance Area: ICT risk management and mitigation

• Facilitating risk assessments, maintaining the risk register and risk reporting.
• Coordinate communications related to ICT Governance, Risks, and Controls.
• Collaborate with ICT Manager in reporting on ICT to the ICT Steering committee as well as any other identified Committees.
• Design framework and define document structure for the disaster recovery plan documentation.

Key Performance Area: ICT Compliance and Auditing

• Ensure ICT management and staff are aware of responsibilities related to internal and external ICT audits, audit observations/deficiencies responses, and corrective action ownership.
• Plan and coordinate any required ICT governance training.
• Participate in any project-related work to address technologies compliance as mandated
• Identify gaps in the effectiveness of the implemented ICT controls
• Perform regular reviews to ensure that vendors follow governance framework and SLA deliverables are being adhered to
• Regular reviews on systems and user access.

Key Performance Area: Project governance

• Responsible for the governance of ICT related projects
• Responsible for project gate reviews and influencing go-no-go decisions.

Key Performance Area: Incident Response and Management

• Continue to develop and maintain an incident response plan and the supporting processes and playbooks
• Ensure that legal and regulatory requirements are met should any incidents occur
• Lead the response to security incidents, including investigation, containment, eradication, and recovery

MINIMUM REQUIREMENTS:

Qualifications and Experience

• Bachelor's Degree or NQF level 7 diploma in Computer Science/Information Technology or Auditing
• COBIT foundations certificate or CISA certification
• Other ISACA qualifications will be an advantage e.g. CGEIT, CISM, CRISC,COBIT
• 5 years’ experience in ICT Governance, risk and compliance or auditing of ICT environments
• Experience and working knowledge of industry frameworks (ISO 27001/2 and ISO9000, ITIL etc.)