ICT Risk and Compliance Officer at Nambiti Technologies (Pty) Ltd

Job Description

• Provide guidance, feedback, and support across ICT regarding identification of risk, risk mitigation and management. 
• Create appropriate metrics to quantify, track and report on identified risk across ICT. 
• Provide analysis and assessments for risks associated with relevant ICT projects and 
• initiatives. Provide support with tracking of project mitigation actions.
• ICT risk awareness and training design and publish communications which develop 
• awareness and accountabilities for risk management activities.
• Development and implementation of an appropriate risk reporting discipline in ICT and to the 
• TPT and Transnet Risk Committees.
• Participate in various internal and external audits. 
• Working with Audit /Security/Compliance officers in ICT to collate and improve risk reporting and evaluation.
• Keeps abreast of developments by identifying emerging risks and creation of associated risks registers.
• Contribute to TPT and Transnet risk framework and reporting.
• Maintain a certain level of internal auditing to proactively deal with lower-level operational risks.
• Provide guidance and identification of emerging ICT strategic risks, within the department and Operating Division and Transnet and global environment.
• Provide feedback to related governance forums regarding latest risk posture of TPT ICT i.e., forums such as MANCO and RISCO
• Compliance
• Develop and test processes to ensure compliance in accordance with all aspects of the ICT 
• PPSG’s and frameworks. 
• Ensure that IT staff understand their role in compliance.
• Ensure that IT compliance issues/concerns are being appropriately evaluated, investigated, and resolved.
• Identify potential areas of compliance vulnerability and risk; recommend, get approval for and drive corrective action plans.
• Participate in various internal and external audits. 
• Ensure that all project and task activities comply with the appropriate governance frameworks.
• Keeps abreast of developments in the areas of legal, regulatory, corporate requirements.
• Ensure vendor and stakeholder compliance to Transnet’s Governance frameworks and adherence to SLA’s.
• Weekly, monthly, and quarterly reporting on the compliance across the various application systems across the organization. 
• Ensure that compliance vulnerabilities are raised, and appropriate steps are taken to resolve. 
• Monitor and coordinate IT compliance activities to remain abreast of the status of all 
• compliance activities on a continuing basis. 
• Take appropriate steps to identify trends and improve compliance effectiveness. 
• Provide feedback to governance forums regarding status of the IT compliance assessments, for example Internal controls steering committee. 

Qualifications and Experience

• Bachelor of Technology Diploma in Information Technology, Computer Science or Auditing
• A minimum of five (5) years’ experience in ICT Governance, Risk and Compliance.
• Experiencing in coordinating ICT Risk and Compliance activities across multiple ICT 
• Departments, Projects, and Operations
• Ability to operate and engage with Stakeholders at a Senior Management level