IT Governance & Risk Consultant at Salt South Africa

Role Purpose

• Our client, a leading organisation in the wholesale, retail and manufacturing sector, seeks a senior consultant to strengthen enterprise IT governance, technology risk and compliance. The role partners with Technology, Cyber Security, Internal Audit and business leaders to improve governance frameworks, manage technology risk, support audit readiness and drive continuous improvement across the IT landscape.

Key Responsibilities

• Develop and enhance IT governance frameworks, policies and standards.
• Facilitate enterprise IT risk assessments and maintain technology risk registers.
• Support internal and external audits and coordinate remediation activities.
• Review IT controls and recommend improvements to reduce operational risk.
• Monitor compliance with regulatory, security and governance requirements.
• Provide governance reporting and executive-level risk insights.
• Partner with infrastructure, applications and security teams on governance initiatives.
• Promote governance best practices across projects and operational teams.

Technical Environment & Skills

• COBIT, ISO 27001, NIST, ITIL and IT General Controls (ITGC).
• Enterprise risk management and governance reporting.
• Policy development and control design.
• Risk registers and audit management.
• Microsoft 365; exposure to Azure/Entra ID advantageous.
• SAP or other ERP governance exposure beneficial but not essential.

Experience

• 6-10+ years in IT Governance, Technology Risk, GRC or IT Audit within a complex enterprise environment. Demonstrated experience influencing senior stakeholders and implementing governance improvements.

Preferred Industry Background

• Experience within large retail, wholesale, manufacturing, FMCG or distribution organisations. Exposure to enterprise governance, digital transformation or cloud initiatives is advantageous.

Professional Certifications (Advantageous)

• CISA
• CRISC
• CGEIT
• ISO 27001 Lead Implementer
• ITIL Foundation

Key Competencies

• Strategic thinking
• Stakeholder engagement
• Problem solving
• Executive communication
• Continuous improvement