ICT Governance Officer (Level 9), Head Office - Bridgetown at CapeNature

Job Description

• This role is a key contributor to IT Strategy and will be responsible for monitoring and evaluating the ICT standards and compliance being used in the ICT Department and focusing on improving current business practices and processes in line with the Entity’s objectives with a special focus on cybersecurity. The successful incumbent will be appointed on a 5-year fixed-term contract basis and will be based at the CapeNature Head Office in Bridgetown, Cape Town.

RESPONSIBILITIES:

Key Performance Area: ICT policy framework and management

• Develop and maintain ICT policies/standards/guidelines designed to establish controls to address risks, and operate ICT effectively and efficiently
• Monitor external standards and risk/control trends to determine if internal ICT practices are contemporary with industry, regulatory and/or business expectations.
• Create any required templates and standards to be adopted by ICT
• Develop and implement information security policies, standards, and procedures
• Keep the CapeNature policy taxonomy updated and ensure AGSA review requirements are met.

Key Performance Area: ICT risk management and mitigation

• Facilitating risk assessments, maintaining the risk register and risk reporting.
• Coordinate communications related to ICT Governance, Risks, and Controls.
• Collaborate with ICT Manager in reporting on ICT to the ICT Steering committee as well as any other identified Committees.
• Design framework and define document structure for the disaster recovery plan documentation.

Key Performance Area: ICT Compliance and Auditing

• Ensure ICT management and staff are aware of responsibilities related to internal and external ICT audits, audit observations/deficiencies responses, and corrective action ownership.
• Plan and coordinate any required ICT governance training.
• Participate in any project-related work to address technologies compliance as mandated
• Identify gaps in the effectiveness of the implemented ICT controls
• Perform regular reviews to ensure that vendors follow governance framework and SLA deliverables are being adhered to
• Regular reviews on systems and user access.

Key Performance Area: Project governance

• Responsible for the governance of ICT related projects
• Responsible for project gate reviews and influencing go-no-go decisions.

Key Performance Area: Incident Response and Management

• Continue to develop and maintain an incident response plan and the supporting processes and playbooks
• Ensure that legal and regulatory requirements are met should any incidents occur
• Lead the response to security incidents, including investigation, containment, eradication, and recovery

MINIMUM REQUIREMENTS:

Qualifications and Experience

• NQF level 6 or a relevant qualification in Computer Science/Information Technology or Auditing
• COBIT foundations certificate or CISA certification
• Other ISACA qualifications will be an advantage e.g. CGEIT, CISM, CRISC, COBIT
• 2 years’ experience in ICT Governance, risk and compliance or auditing of ICT environments
• Experience and working knowledge of industry frameworks (ISO 27001/2 and ISO9000, ITIL etc.)

Competencies

• Customer service orientation
• Strong communication skills
• Prioritisation and time management
• Ability to work under pressure and meet deadlines
• Strong ability to pay attention to detail and be analytical
• Good problem-solving skills
• Good project planning and organizing skills
• Computer literacy plus advanced proficiency in Ms Office
• Continual improvement mindset