(1919) IT Governance, Risk and Compliance Control Specialist - BSTD

The main purpose of this position is to mature the information technology (IT) control environment through the implementation and monitoring of a sound IT control framework, to assess the adequacy and effectiveness of controls, as well as to provide assurance that the South African Reserve Bank's (SARB) information and communications technology (ICT) systems and investments are adequately protected.

Detailed description

The successful candidate will be responsible for the following key performance areas:

• Develop a sound IT control framework to assess the adequacy and effectiveness of controls.
• Provide assurance that the SARB's ICT systems and investments are adequately protected.
• Drive the planning, execution, governance, tracking and reporting of the Control Self-Assessment (CSA) program.
• Ensure that control assessment programs are completed in accordance with established SARB guidelines and accurately reflect the adequacy and effectiveness of the controls tested and the associated level of risk.
• Proactively assess the adequacy and operating effectiveness of key IT general controls at or near day one of go-live for key projects within the SARB.
• Act as the subject matter expert, actively engaging the process owners and control partners to ensure all controls are accurately designed and documented, and key risks are being properly identified and mitigated.
• Act as key contact with the process owners and control partners to develop remediation plans and ensure that key timelines are met, proactively enhancing the control environment.
• Manage quality assurance reviews of CSA data (including reporting, escalation and tracking).
• Design and operate a meaningful management reporting, including periodic controls analysis.
• Collaborate with other work streams within the IT functions.

Job requirements

To be considered for this position, candidates must have:

• a Bachelor’s degree in Information Systems or a related field;
• industry certification in Auditing, Risk, or Information Security;
• five to eight years’ experience in IT controls testing or related disciplines such as information security, risk management, business continuity or compliance.

Additional requirements include

• industry, organisational and business awareness knowledge and skills;
• quality assurance knowledge and skills;
• continuous improvement knowledge and skills;
• continued learning and/or professional development knowledge and skills;
• control definition knowledge and skills;
• legislation, governance, risk and compliance knowledge and skills; and
• risk and compliance monitoring and reporting skills.

In line with the SARB’s commitment to diversifying its workforce, preference will be given to suitable candidates from designated groups. People with disabilities are welcome to apply.

The SARB offers remuneration and benefits commensurate with the level of the position and in line with the market. The level at which the successful applicant will be appointed will depend on his/her competence and experience.