ICT Governance Officer

About the role

CapeNature is looking for an ICT Governance Officer to support IT strategy by monitoring and evaluating ICT standards and compliance within the ICT department, improving business practices and processes in line with the entity's objectives, with a special focus on cybersecurity. The post is based at the CapeNature Head Office in Bridgetown, Cape Town, on a 5-year fixed-term contract.

Key responsibilities

• Develop and maintain ICT policies, standards and guidelines that control risks and enable effective, efficient ICT use, and create the templates and standards adopted by ICT
• Monitor external standards and risk/control trends against industry, regulatory and business expectations
• Develop and implement information security policies, standards and procedures, and keep the CapeNature policy taxonomy updated so AGSA review requirements are met
• Facilitate risk assessments, maintain the risk register and risk reporting, and coordinate ICT governance, risk and control communications
• Work with the ICT Manager to report on ICT to the ICT Steering Committee and other committees, and design the disaster recovery plan documentation structure
• Ensure staff understand their responsibilities in internal and external ICT audits, and plan and coordinate ICT governance training
• Review vendor adherence to the governance framework and SLAs, check systems and user access, and identify gaps in ICT controls
• Govern ICT projects, including project gate reviews and go/no-go decisions
• Maintain the incident response plan and playbooks, lead security incident response (investigation, containment, eradication, recovery), and meet legal and regulatory requirements after incidents

Required profile

• NQF level 6 or a relevant qualification in Computer Science, Information Technology or Auditing
• 2 years' experience in ICT governance, risk and compliance or auditing of ICT environments
• Working knowledge of industry frameworks such as ISO 27001/2, ISO 9000 and ITIL

Required skills

• COBIT Foundations certificate or CISA; other ISACA qualifications (CGEIT, CISM, CRISC, COBIT) are an advantage
• Advanced proficiency in Microsoft Office
• Strong communication, prioritisation, attention to detail, problem-solving and project planning skills