Job Description

This role is a key contributor to IT Strategy and will be responsible for monitoring and evaluating the ICT standards and compliance being used in the ICT Department and focusing on improving current business practices and processes in line with the Entity’s objectives with a special focus on cybersecurity.

The successful incumbent will be appointed on a 5-year fixed-term contract basis and will be based at the CapeNature Head Office in Bridgetown, Cape Town.

RESPONSIBILITIES:

Key Performance Area: ICT policy framework and management

Develop and maintain ICT policies/standards/guidelines designed to establish controls to address risks, and operate ICT effectively and efficiently
Monitor external standards and risk/control trends to determine if internal ICT practices are contemporary with industry, regulatory and/or business expectations.
Create any required templates and standards to be adopted by ICT
Develop and implement information security policies, standards, and procedures
Keep the CapeNature policy taxonomy updated and ensure AGSA review requirements are met.

Key Performance Area: ICT risk management and mitigation

Facilitating risk assessments, maintaining the risk register and risk reporting.
Coordinate communications related to ICT Governance, Risks, and Controls.
Collaborate with ICT Manager in reporting on ICT to the ICT Steering committee as well as any other identified Committees.
Design framework and define document structure for the disaster recovery plan documentation.

Key Performance Area: ICT Compliance and Auditing

Ensure ICT management and staff are aware of responsibilities related to internal and external ICT audits, audit observations/deficiencies responses, and corrective action ownership.
Plan and coordinate any required ICT governance training.
Participate in any project-related work to address technologies compliance as mandated
Identify gaps in the effectiveness of the implemented ICT controls
Perform regular reviews to ensure that vendors follow governance framework and SLA deliverables are being adhered to
Regular reviews on systems and user access.

Key Performance Area: Project governance

Responsible for the governance of ICT related projects
Responsible for project gate reviews and influencing go-no-go decisions.

Key Performance Area: Incident Response and Management

Continue to develop and maintain an incident response plan and the supporting processes and playbooks
Ensure that legal and regulatory requirements are met should any incidents occur
Lead the response to security incidents, including investigation, containment, eradication, and recovery

MINIMUM REQUIREMENTS:

Qualifications and Experience

NQF level 6 or a relevant qualification in Computer Science/Information Technology or Auditing
COBIT foundations certificate or CISA certification
Other ISACA qualifications will be an advantage e.g. CGEIT, CISM, CRISC, COBIT
2 years’ experience in ICT Governance, risk and compliance or auditing of ICT environments
Experience and working knowledge of industry frameworks (ISO 27001/2 and ISO9000, ITIL etc.)

Competencies

Customer service orientation
Strong communication skills
Prioritisation and time management
Ability to work under pressure and meet deadlines
Strong ability to pay attention to detail and be analytical
Good problem-solving skills
Good project planning and organizing skills
Computer literacy plus advanced proficiency in Ms Office
Continual improvement mindset

Please Send your resume/CV