Minimum Requirements QUALIFICATIONS: Diploma or degree in Information Technology, Information Systems, IT Auditing, Cybersecurity, Risk Management or a related field. EXPERIENCE: 2-3 years' relevant experience in IT compliance, IT auditing, governance, information security or a similar control-focused role. Experience with IT General Controls and maintaining audit evidence. Exposure to internal or external IT audits would be advantageous. KNOWLEDGE: Understanding of POPIA and information security principles. Knowledge of access management, change management, backups, disaster recovery and cybersecurity controls. Familiarity with frameworks such as CIS or NIST would be advantageous. SKILLS AND COMPETENCIES: Strong analytical and problem-solving skills. Excellent documentation and record-keeping skills. Strong attention to detail. Ability to identify control weaknesses and compliance exceptions. Good written and verbal communication skills. Ability to work independently and follow up with stakeholders. High level of integrity when handling confidential information. Ability to manage multiple audit findings, deadlines and compliance activities. KEY RESPONSIBILITIES: 1. IT Compliance and Audit Controls Assist with implementing, documenting and maintaining IT controls. Monitor key IT General Controls, including user and privileged access, onboarding and termination, change management, backups, IT operations and data integrity. Perform periodic control reviews and maintain supporting audit evidence. Identify control weaknesses and non-compliance and recommend corrective action. Track audit findings and remediation actions through to closure. Escalate overdue or high-risk findings to the IT Manager and relevant management. 2. IT Governance and Risk Management Assist with identifying, assessing and monitoring IT-related risks. Maintain IT risk, control and compliance registers. Support the development and review of IT policies, procedures and standards. Conduct scheduled compliance reviews against approved controls and policies. Assist with monitoring third-party compliance where IT systems, services or company information are affected. 3. Information Security and Data Protection Monitor compliance with POPIA and Eskort information security requirements. Conduct periodic reviews of user, privileged and system access. Monitor adherence to authentication, password and access-control standards. Review joiner, mover and leaver processes. Assist with monitoring cybersecurity, backup and disaster recovery controls. Support security and compliance investigations and track remediation of identified issues. 4. IT Audits and Reporting Coordinate internal and external IT audit requirements. Gather, organise and maintain supporting audit evidence. Liaise with auditors, IT personnel and relevant business stakeholders. Maintain an audit findings register, including owners, due dates, status and evidence. Follow up and escalate overdue audit actions. Prepare monthly or quarterly compliance reports highlighting key risks, findings and outstanding actions. 5. Policies and Continuous Improvement Maintain the register of IT policies, procedures and standards. Coordinate policy and SOP reviews and updates. Monitor compliance with approved IT policies. Identify opportunities to strengthen controls and improve audit readiness. Assist with IT compliance and information security awareness activities.