System Management & Governance Engineer - Part-Time

Overview:

We are seeking a System Management & Governance to support the management, governance, and continuous improvement of assigned enterprise systems.The role focuses on system assurance, risk management, audit readiness, andcoordination of system changes across multiple stakeholders.

Key Responsibilities:

1.    Conduct System Criticality Assessment

a.    Perform periodic system criticality assessments inaccordance with prevailing IT Policies.

b.    Assess and document the business impact, securityclassification, and operational criticality of assigned Enterprise systems.

c.     Ensure assessments are reviewed and updated when thereare material changes to system usage, hosting model, integrations, or businessreliance.

d.    Support submission of criticality outcomes forgovernance review and audit reference.

2.    Conduct System Risk Assessments

a.    a) Lead or support annual (or policy‑triggered)system risk assessments covering security, availability, data protection, andoperational risks.

b.    Work with system owners, vendors, and ITSS toidentify, assess, and document system risks.

c.     Track risk treatment actions and ensure residual risksare formally accepted or mitigated in line with IT governance requirements.

d.    Maintain risk assessment artefacts for audit andcompliance purposes.

3.    Quarterly Scorecard & Assurance Against Agency‑WideTechnical Architecture (AWTA) / Security Requirements

a.    Maintain system documentation in accordance with theIT Project Management SOP.

b.    b) Ensure documentation reflects approved systemconfigurations, integrations, and change requests.

c.     Document key system changes arising from enhancements,fixes, or vendor updates (Microsoft / Wellspring).

d.    Ensure documentation is stored in approvedrepositories and remains audit‑ready.

e.    Timely update of system changes in approvedrepositories and system register

4.    Prepare for System Audits & Remediation Tracking

a.    Support system audit preparation by consolidatingrequired artefacts, evidence, and responses.

b.    Coordinate with the System Owner, who interfacesdirectly with auditors, and provide technical support when required.

c.     Work with managed resources, vendors, and ITSS toclarify technical findings.

d.    Track remediation actions, owners, and timelines untilclosure and report status during audit cycles.

5.    Establish & Support Disaster Recovery and CyberIncident Recovery

a.    Support the establishment and maintenance of systemdisaster recovery (DR) and cyber incident recovery expectations for SaaS‑basedsystems.

b.    Align DR and incident recovery considerations withvendor‑provided capabilities (Microsoft / Wellspring) and IT policies.

c.     Assist in documenting recovery assumptions, escalationpaths, and dependencies.

d.    Support post‑incident reviews orassurance checks when required.

6.    Manage System Integration Certificates & Keys

a.    Track system integration certificates, API keys, orsimilar authentication artefacts used by the assigned Enterprise systems.

b.    Ensure timely renewal of certificates and keys atrequired frequency to prevent service disruption.

c.     Coordinate with vendors, integration partners, andITSS for renewal and replacement activities.

d.    Maintain records of certificate lifecycle and renewalactions for audit purposes.

7.    Conduct and Report Routine Access Log Reviews

a.    Perform routine access log reviews in accordance with IT Security Policy requirements.

b.    Review access activities for anomalies, policydeviations, or potential security concerns.

c.     Prepare access review summaries and escalate findingsto System Owners or ITSS where necessary.

d.    Ensure log retention and review practices align withestablished IT security requirements.

8.    Timely Removal of Access for Resigned or TransferredPersonnel

a.    Ensure access rights are removed or disabled forresigned personnel within stipulated IT policy timelines.

b.    Coordinate with HR triggers, system accessadministrators, and ITSS to execute user deprovisioning.

c.     Verify completion of access removal and retainevidence for audit and compliance needs.

d.    Support ad‑hoc checks arising fromaudit findings or security reviews.

9.    Manage System Changes, Enhancements, SecurityAssessments & Overall System Oversight

a.    Coordinate and manage system changes, enhancements,and fixes across the assigned Enterprise systems from initiation to closure.

b.    Track progress of approved change requests,enhancements, and remediation actions to ensure delivery aligns with scope,timelines, and IT governance requirements.

c.     Coordinate with System Owners, ITSS, vendors, andmanaged resources to monitor implementation status and resolve dependencies ordelays.

d.    Ensure system changes undergo required architecture,security, and compliance reviews where applicable, and that outcomes areproperly documented.

e.    Provide regular status updates on system changes,risks, and issues to relevant stakeholders.

f.      Manage and oversee VulnerabilityAssessment/Penetration Test review, security remediation and overall systemhealth to ensure compliance with IT governance, security, and auditrequirements.

Additional Information:

• This is a temporary full-time role (1+1yr optional), supporting multiple assigned Enterprise systems concurrently
• Scope includes project, with operational support and governance/assurance functions

Key Skills & Competencies:

• Strong understanding of IT Project Management (PM) and Vendor Management, IT Governance, Risk Management, and Compliance frameworks
• Demonstrated PM experience in at least 1 SDLC of a medium-sized project.
• Familiarity with system security practices, including accounts & access control, log monitoring, and vulnerability management
• Experience in system audit preparation and remediation tracking
• Ability to manage system changes, enhancements, and lifecycle activities across multiple platforms
• Good knowledge of disaster recovery (DR) and incident response processes
• Competency in documentation and maintaining audit-ready artefacts
• Strong stakeholder management and coordination skills (e.g. working with vendors, system owners, IT teams). Ability to solicit requirements and analyse requirements
• Analytical mindset with ability to identify risks, gaps, and improvement opportunities

·      Good written and verbal communication skills for reportingand governance updates

·      Ability to work independently and as part of a team.

Qualifications & Experience:

• Degree in Information Technology, Computer Science, Information Systems, or related field
• Preferably 5 years of experience in IT systems support, governance, or security-related roles
• PMP Certified will be advantageous
• Exposure to enterprise systems (e.g. CRM, SaaS platforms, or workflow systems) is advantageous
• Familiarity with IT policies, security standards,risk assessment and audit processes is preferred
• Experience working with vendors or managed service providers will be an added advantage
• Candidates with knowledge of government or regulated environment IT practices are preferred

Dimple Jain

EA LicenseNo:91C2918

PersonnelRegistration Number: R22107270