Independent Contractor: Manager: IT Governance, Risk, Audit And Compliance

• The Organisation requires the services of an Independent Contractor: Manager: IT Governance, Risk, Audit and Compliance within the ICT Department for a period of 12 months. This role will be based at Groenkloof National Park, Pretoria.

Requirements

NQF Level 7 qualification in:

• Information Technology
• Information Systems
• Computer Science
• Cybersecurity
• Information Security
• Informatics
• Information Management
• Information Assurance

Professional certifications:

• COBIT 2019 Foundation and/or
• CISA
• CRISC
• CISM

At least 5 years’ experience in:

• ICT Governance
• ICT Risk Management
• ICT Audit Coordination
• Regulatory Compliance
• Information Security Governance

Desirable:

• Honours Degree, Postgraduate Diploma or Master’s Degree.

Professional certifications:

• CISSP
• ISO/IEC 27001 Lead Implementer
• ISO/IEC 27001 Lead Auditor
• ITIL 4 Foundation
• ISO 22301 Lead Implementer (Business Continuity)
• 8 to 10 years’ experience in ICT governance, risk management, audit, regulatory compliance and information security, including experience advising senior management and governance committees.

Knowledge:

• COBIT 2019, ISO/IEC 38500 and King IV.
• ISO/IEC 27001, ISO 31000 and the NIST Cybersecurity Framework.
• ITIL 4 and IT Service Management.
• POPIA, PAIA, PFMA, National Treasury Regulations, Cybercrimes Act and MISS.
• Cybersecurity Governance and Information Security.
• Enterprise Risk Management and ICT Risk Management.
• Internal Audit and ICT Audit Processes.
• Data Governance.
• Disaster Recovery and Business Continuity.
• Vendor/Third-Party Risk Management.
• Public Sector Governance (advantageous).
• Project Management.

Skills and Core Competencies:

• Strategic thinking and governance implementation.
• Audit management and risk analysis.
• Policy development.
• Compliance monitoring.
• Report writing and presentation skills.
• Stakeholder management and negotiation.
• Analytical and problem-solving skills.
• Project management and leadership.
• Strong written and verbal communication skills.
• High ethical standards and integrity.
• Attention to detail.
• Confidentiality and professionalism.
• Results-driven and innovative.
• Team player.
• Ability to work under pressure.
• Sound judgement and decision-making ability.

Responsibilities

• Develop, review and maintain ICT Governance Frameworks, policies, standards, procedures and guidelines.
• Implement ICT Governance in accordance with COBIT 2019, ISO/IEC 38500 and King IV.
• Facilitate ICT governance committees and governance reporting.
• Monitor ICT governance maturity and recommend improvements.
• Ensure ICT initiatives align with organisational strategy.
• Develop and maintain Information Security policies.
• Ensure implementation of security governance controls.
• Coordinate information security awareness initiatives.
• Monitor compliance with security policies.
• Support ISO 27001 implementation.
• Participate in cybersecurity governance initiatives.
• Develop and maintain the ICT Risk Management Framework.
• Conduct ICT risk assessments.
• Maintain the ICT Risk Register.
• Facilitate risk mitigation plans.
• Monitor implementation of risk treatment plans.
• Report ICT risks to Executive Management and governance committees.
• Perform ICT vendor risk assessments.
• Review supplier compliance.
• Evaluate cloud service providers.
• Monitor SLA compliance.
• Review cybersecurity posture of vendors.

Ensure compliance with legislation including:

• POPIA
• PAIA
• PFMA
• National Treasury Regulations
• Cybercrimes Act
• King IV
• Minimum Information Security Standards (MISS)
• ISO/IEC 27001
• ISO/IEC 38500
• Monitor compliance across ICT.
• Coordinate compliance assessments.
• Develop compliance reports.
• Conduct ICT Governance awareness.
• Deliver ICT Risk awareness.
• Facilitate Information Security awareness.
• Train users on ICT policies.
• Promote a compliance culture.
• Coordinate ICT internal and external audits.
• Develop audit response plans.
• Monitor implementation of audit findings.
• Track audit action plans.
• Liaise with Internal Audit, External Audit and the Auditor-General South Africa.
• Prepare audit progress reports.
• Coordinate ICT Business Continuity Planning.
• Monitor Disaster Recovery compliance.
• Conduct governance reviews.
• Participate in Disaster Recovery testing.

Policies to be Developed, Reviewed and Maintained

• ICT Governance Policy
• Information Security Policy
• Data Governance Policy
• Acceptable Use Policy
• Password Management Policy
• Backup Policy
• Disaster Recovery Policy
• Risk Management Framework
• ICT Standards
• ICT Procedures

Reporting and Presentations

Prepare and present reports/submissions to:

• ICT Steering Committee
• Executive Committee (EXCO)
• Board Committees
• Audit and Risk Committee
• Internal Audit
• External Audit
• Operations Committee (OPSCO)
• Policy and Compliance Unit (PCU)
• ICT Management Committee

Please Note

• If you do not receive a response within 21 days after the closing date, please consider your application unsuccessful.
• No CVs will be accepted after the closing date.
• Appointments will be made in accordance with SANParks Employment Equity policies.
• Applicants with foreign qualifications must submit SAQA evaluated results.

How To Apply

Interested candidates who meet the above requirements should forward their applications accompanied by the required documentation listed below to the following:

Documents Required

Interested persons who meet the above requirements should submit:

• 1-page Cover Letter
• Detailed CV
• Certified copy of ID
• Certified copies of Qualifications (certified within the last 3 months)

Application will only be completed when you have completed the below steps:

Complete the link below or scan the QR CODE

• INDEPENDENT CONTRACTOR: MANAGER: IT GOVERNANCE, RISK, AUDIT AND COMPLIANCE – Fill out form

Submit your cv as per below instructions:

Must be accompanied by a 1-page Cover letter, Detailed CV, certified copies of your ID and Qualifications to the below email address:

Use the below reference number on your Subject line:

• M: ITG-R-A-C
• E-mail: recruitments1@sanparks.org

Closing Date

• 25 November 2026