Get AI-powered advice on this job and more exclusive features.
Responsibilities
- Ensure the implementation and compliance of Legislative and Organisational policies, procedures, standards, and frameworks across the IT landscape.
- Manage ICT‑related risks in accordance with the Enterprise Risk Management framework, continually assessing the ICT environment for emerging risks and implementing preventative and mitigating measures to reduce likelihood and impact.
- Support the achievement of business goals by reducing the likelihood and impact of potential risks : provide guidance, feedback, and support across ICT regarding risk identification, mitigation, and management; create metrics to quantify, track and report on identified risks; perform risk management for ICT projects and initiatives and ensure risks are appropriately assessed, evaluated, and assigned to relevant owners; conduct ICT risk awareness and training; keep abreast of developments and identify emerging risks, creating associated risk registers; identify process‑improvement opportunities and recommend implementation.
- Keep abreast of developments in legal, regulatory and corporate requirements; ensure vendor and stakeholder compliance with Transnet’s Governance frameworks and adherence to SLAs; report weekly, monthly and quarterly compliance against application systems.
- Assist in executing tasks of the Information Security, Governance, Risk and Compliance function as required.
- Collaborate with internal control, audit, information security and compliance to manage end‑to‑end processes for regular internal and statutory reporting of risks, providing a complete view of all ICT risks and guidance for management decision‑making; provide feedback to governance forums such as MANCO and RISKCO regarding the latest risk posture of TPT ICT.
Qualifications and Experience
Degree (NQF 7) in Information Technology, Computer Science, Internal Auditing or Financial Information Systems (FIS).At least 5 years’ relevant experience in ICT disciplines within a large enterprise, including, but not limited to, ICT Risk Management, ICT Audit, ICT Compliance or ICT Governance.Minimum 1 year in a supervisory or specialist position.Preferred qualifications : CRISC, CISA, CGEIT.Preferred professional memberships : ISACA, Compliance Institute of South Africa, Institute of Internal Auditors (IIA).Relevant qualification NQF 5, 6 years relevant experience with at least 2 years at managerial level or specialist experience.Competencies : sound knowledge of ITIL and COBIT, governance frameworks for ICT, IT laws, KING IV, equity statement preference for designated groups per Employment Equity Plan.Seniority level
Mid‑Senior levelEmployment type
Full‑timeJob function
Finance and SalesIndustries
Transportation, Logistics, Supply Chain and StorageEquity StatementPreference will be given to suitably qualified Applicants who are members of the designated groups in line with the Employment Equity Plan and Targets of the Organisation / Operating Division.
#J-18808-Ljbffr