It Governance, Risk And Compliance Control Specialist - Bstd

Detailed description

The successful candidate will be responsible for the following key performance areas:

• Develop a sound IT control framework to assess the adequacy and effectiveness of controls.
• Provide assurance that the SARB's ICT systems and investments are adequately protected.
• Drive the planning, execution, governance, tracking and reporting of the Control Self-Assessment (CSA) program.
• Ensure that control assessment programs are completed in accordance with established SARB guidelines and accurately reflect the adequacy and effectiveness of the controls tested and the associated level of risk.
• Proactively assess the adequacy and operating effectiveness of key IT general controls at or near day one of go-live for key projects within the SARB.
• Act as the subject matter expert, actively engaging the process owners and control partners to ensure all controls are accurately designed and documented, and key risks are being properly identified and mitigated.
• Act as key contact with the process owners and control partners to develop remediation plans and ensure that key timelines are met, proactively enhancing the control environment.
• Manage quality assurance reviews of CSA data (including reporting, escalation and tracking).
• Design and operate a meaningful management reporting, including periodic controls analysis.
• Collaborate with other work streams within the IT functions.

Qualifications

Job requirements

To be considered for this position, candidates must have:

• a Bachelor's degree in Information Systems or a related field;
• industry certification in Auditing, Risk, or Information Security;
• five to eight years' experience in IT controls testing or related disciplines such as information security, risk management, business continuity or compliance.

Additional requirements include

• industry, organisational and business awareness knowledge and skills;
• quality assurance knowledge and skills;
• continuous improvement knowledge and skills;
• continued learning and/or professional development knowledge and skills;
• control definition knowledge and skills;
• legislation, governance, risk and compliance knowledge and skills; and
• risk and compliance monitoring and reporting skills.