Network technician

Training Manager

Database Administrator

Regional information Systems Auditor

PRINCIPAL ANALYST -  IT RISK AND GOVERNANCE

KEY DUTIES AND RESPONSIBILITIES <ul><li>Reviews the Frameworks in place for IT Governance, Information Security, Data Privacy and IT Service Continuity for sustained effectiveness and alignment to leading practices.</li><li>Participate in the development and implementation of Information and Technology governance frameworks and policies to ensure alignment with business objectives and regulatory requirements.</li><li>Ensure continuous compliance with international Information Security, Information &amp; Technology Governance standards and local regulatory requirements (ISO 27001, National Institute of Standards and Technology, the Data Protection Act) through policy updates and periodic reviews.</li><li>Monitor compliance adherence across the Software Development Life Cycle (SDLC) through onsite reviews and automated compliance checks in DevOps pipelines.</li><li>Ensure that outstanding IT Audit findings (internal and external audit findings) are constantly followed up on and driven to resolution.</li><li>Oversee the reporting and analysis of IT risk incidents and investigate root causes of incidents and ensure corrective actions are implemented.</li><li>Perform continuous, and independent, risk analysis using automated tools to detect security misconfigurations or non-compliance in cloud, on-prem, and hybrid IT environments.</li><li>Evaluate the effectiveness of Security risk assessments being executed by the Information and Cyber Security function, perform gap-analysis, and ensure remediation in liaison with the IT and Cyber Security Services team.</li><li>Perform third-party vendor risk assessments and drive security improvements across partnerships.</li><li>Enhance resilience by providing oversight on business continuity and disaster recovery plans and ensure regular testing is conducted.</li><li>Evaluate the adequacy and effectiveness of safeguards protecting sensitive Company information and drive information security awareness initiatives.</li><li>Collaborate with IT architects to design resilient security frameworks that align with best practices.</li><li>Conduct regular training and awareness sessions (in person, virtual or training material) regarding IT risk management and the roles the various parties play in the management of IT Risk.</li><li>Prepare Risk Management Reports, dashboards and presentations for Board and Executive Committees.</li></ul> REQUIRED EXPERIENCE AND QUALIFICATIONS <ul><li>Bachelor’s degree in Computer Science/ Information Systems/ Computer Engineering.</li><li>A master’s degree in a relevant discipline will be an added advantage</li><li>Relevant professional certification in CISA, CRISC CISM, CISSP and CIA is a must</li><li>Minimum of 6 years’ experience in IT Risk and Governance with experience in ISO 27001:2022 audits, security risk assessments, information governance, data privacy, security awareness, or cybersecurity maturity assessments.</li></ul>

Notifications