Specialist: ICT, Risk and Compliance

In brief

Overview The Border Management Authority is seeking a Specialist: ICT, Risk and Compliance. This role involves performing a range of duties related to ICT assurance, governance, risk management, and security compliance. What you will do The successful candidate will be expected to perform the following duties and responsibilities: * **ICT Assurance and Compliance Monitoring.** * Coordinate ICT internal and external audits. * Coordinate audit management responses and evidence submissions. * Monitor implementation of ICT audit recommendations and corrective actions. * Conduct compliance reviews against approved ICT policies, standards and procedures, excluding specialist identity, endpoint and third-party assurance reviews covered under separate KPAs. * Report audit and compliance trends, control weaknesses and remediation status to management. * **ICT Governance Framework** * Develop, implement and maintain ICT governance frameworks to support effective ICT oversight and decision-making. * Develop, review and maintain ICT security policies, standards, procedures and guidelines. * Maintain the ICT policy and governance artefact register in line with approved review cycles. * Ensure ICT governance alignment with the Corporate Governance of ICT Policy Framework CGICTPF and relevant standards. * Advise stakeholders on governance requirements for embedding ICT controls into business processes. * **Third-party risk and assurance** * Review third-party ICT security assurances during onboarding, contract renewal or material service changes. * Coordinate supplier ICT security, privacy and compliance reviews. * Track third-party ICT risk issues, control gaps and supplier remediation actions. * Monitor applicable ICT security SLA and assurance obligations related to suppliers. * **ICT Risk Management.** * Develop and maintain the ICT risk management process and ICT risk register. * Facilitate ICT risk assessments across relevant ICT domains and initiatives. * Develop and coordinate risk mitigation strategies and treatment plans for identified ICT risks. * Monitor implementation of ICT risk treatment actions and escalate overdue or high-risk items. * Support enterprise risk reporting by providing ICT risk inputs and status updates. * **ICT Security, Identity and Endpoint Control Monitoring** * Support the monitoring of identity and access management controls, including user access reviews, privileged access and account lifecycle processes. * Coordinate basic endpoint security compliance checks against approved ICT security standards and baseline requirements. * Track and report exceptions relating to access control, endpoint protection, patching, malware protection and device configuration compliance. * Escalate identified ICT security control weaknesses for remediation and management reporting. * **ICT Governance Stakeholder Engagement and Reporting** * Coordinate and consolidate ICT governance, risk, compliance and security inputs for management and governance structures. * Coordinate submission of ICT Steering Committee, Internal Audit Committee and Audit and Risk Committee reports. * Facilitate stakeholder engagements on ICT governance, risk, compliance and security matters. * Track committee decisions, stakeholder inputs and cross-functional commitments until closure. * Maintain consistent stakeholder communication on ICT governance matters without duplicating technical ownership assigned to other KPAs. Requirements (from the original advert) * **Minimum Qualifications:** * Grade 12 Matric * Undergraduate qualification at NQF 7 as recognised by SAQA in Computer Science, Information Technology, Information Security or equivalent. * Certified Information Systems Auditor CISA certification is advantageous. * **Minimum Experience:** * 5 years relevant work experience in ICT Governance, Risk and Compliance, or IT Security * **Knowledge:** * ISO/IEC 27001, ISO/IEC 27002, ISO 31000 * COBIT, ITIL * Corporate Governance of ICT Policy Framework * ICT Governance structures * Minimum Information Security Standards MISS * Enterprise-wide Risk Management * Information Technology Policies * Policy Development * IT Risk Management * IT Governance * **Other requirements:** * Flexibility in working hours will be required to meet demands of the role. * May be required to work overtime. * Valid driver’s License Who should apply The ideal candidate will be an individual with a minimum of Grade 12 Matric and an NQF 7 undergraduate qualification in Computer Science, Information Technology, Information Security, or an equivalent field, preferably holding a CISA certification. They should possess at least 5 years of relevant experience in ICT Governance, Risk and Compliance, or IT Security, coupled with specific knowledge in ISO standards, COBIT, ITIL, CGICTPF, MISS, and various aspects of IT risk and governance. The role also requires flexibility in working hours, willingness to work overtime, and a valid driver's license, for an individual capable of managing comprehensive ICT assurance, governance, risk, and security responsibilities. Deadline Not specified Reference Original posting: https://www.myjobmag.co.za/job/specialist-ict-risk-and-compliance-border-management-authority Source: myjobmag

Summary drafted with AI assistance from the original advert. The advert itself is the authority — how we use AI.

At a glance

• At least 5 years of experience.

Extracted automatically from the advert; confirm requirements on the original listing.

Job description

Before you apply

• Confirm the requirements and closing date on the original listing (myjobmag). SPANi lists vacancies from other sites and may not reflect last-minute changes.
• Legitimate employers do not charge application, registration or training fees.
• Don't send your ID or bank details before you have confirmed the employer is real.

How to spot a job scam

Before you apply

• Read the full advert and confirm you meet the minimum requirements before applying.
• Tailor your CV headline and most recent experience to the job title and key skills.
• Note the closing date and reference number, and keep a copy of what you submit.
• Apply only through the employer or job board link — never pay to apply.