GRC Analyst (IT GRC)

This role reports to the Senior GRC Manager in the IT Governance Support Services (GSS) division of the clients IT department.

The environment is results-driven and one where team members are trusted, supported, and empowered to grow, where healthy work-life balance is promoted, contributions are valued, and achievements are celebrated.

A hybrid, remote working model is on offer. The successful candidate would be expected to avail themselves for occasional, in-person engagements at the Cape Town-based offices, but most of the work and engagements are conducted virtually.

The ideal candidate will: have excellent verbal, written and inter-personal communication skills with the ability to develop strong stakeholder relationships and manage expectations; be service-oriented and results-driven with a track record of delivery within agreed timelines and with attention to detail; have strong analytical thinking and problem-solving skills; be skilled at planning, time management and coordinating activities; demonstrate high levels of enthusiasm, initiative and adaptability; have a track record of accountability, taking ownership, following through on commitments and driving tasks through to completion; work well independently and as part of a closely-knit team, contributing toward the team’s performance and growth.

Purpose of the Position:
The IT GRC Analyst will play a pivotal role in supporting the senior GRC manager in maturing the IT GRC processes and practices by assisting with: (i) IT policies, procedures, and processes; (ii) IT Risk Management; (iii) Assurance Reviews; (iv) various GRC-related projects; (v) Management Reports.
Main Duties and Responsibilities include:
* GRC Projects:
o Assist with the scoping, planning, execution and monitoring of certain GRC-related projects.
* IT Governance:
o Assist with the definition and implementation of Key Performance Indicators
o Assist with the development of RACI matrices for various IT processes;
o Assist with the development and implementation of IT-related policies and procedures.
* IT Risk Management for Operational & Project risks – periodic support of:
o Identification & assessment of IT risks
o Monitoring the implementation of risk treatment actions.
o Maintenance of the risk and issues registers
* IT Assurance Management:
o Support of internal audits and assessments against adopted standards (e.g. COBIT, ISO27001 etc.) to assist with compliance management and the improvement of IT / business processes.
o Assist with assurance reviews of IT Projects
* IT Processes and Controls:
o Support of the design and implementation of IT Processes and Controls
o Assist with conducting reviews and monitoring compliance with approved business processes and control frameworks
* Internal / External Audits:
o Co-ordination of activities required to fulfil the requirements of internal and external audits.
* Reporting:
o Assist with the ongoing refinement / improvement of GRC-related dashboard reports.
o Assist with the preparation and dissemination of GRC management reports, ensuring deadlines are met.
GRC Analyst Requirements include:

Requirements:
* An Information Systems or IT-related qualification at a minimum NQF level 6 (National Diploma or Advanced Certificate).
* A minimum of 5 years’ relevant IT GRC experience in an enterprise (complex) environment.
* A thorough understanding of:
o An IT Governance framework – e.g. COBIT
o an industry-recognised Risk Management framework
* Good English verbal and written, business communication skills
* Proficient in the use of the Microsoft Office suite.

Additional / Advantageous Requirements:
* One of the following certifications: M_o_R, CRISC, CGEIT or an IRMSA-endorsed Risk Management certification.
* COBIT Certification (IT Governance & Management Framework)
* Project Management skills and experience in the use of an industry-recognised Project Management methodology.
* Good presentation and facilitation skills.
* Strong planning, organising, and coordinating skills.
* Good inter-personal and relationship-building skills.
* Strong negotiation and influencing skills.

Salt is acting as an Employment Business in relation to this vacancy.