IT Governance & Risk Compliance Specialist (6‑Month Contract)

About the role

This 6‑month contract position supports a leading global technology services organisation delivering IT governance, risk and compliance services to a major higher‑education enterprise. The specialist will work hands‑on to strengthen governance frameworks, improve risk management practices and ensure regulatory compliance across the institution.

Key responsibilities

• Design, implement and embed end‑to‑end IT GRC frameworks and operating models.
• Align governance structures with COBIT, ITIL, ISO 27001, NIST and related standards.
• Identify, assess, track and report IT risks, producing executive‑level dashboards and metrics.
• Coordinate internal and external audit readiness, including ISO certification processes.
• Enhance cyber‑risk, incident‑response and stakeholder communication procedures.
• Support disaster‑recovery and business‑continuity planning, testing and execution.
• Oversee third‑party and supplier risk for outsourced IT environments.
• Continuously assess control effectiveness across IT and security domains.
• Manage compliance with applicable legislation such as POPIA and cyber‑crime regulations.
• Report governance status to executive forums and risk committees with clear escalation paths.

Required profile

• Degree in Information Technology or a related discipline.
• 8+ years of experience in IT governance, risk, compliance or information‑security governance.
• Strong working knowledge of enterprise governance frameworks (COBIT, ITIL, ISO 27001, NIST).
• Proven experience supporting audits, compliance programmes and risk‑governance structures.
• Understanding of IT control environments, risk registers and compliance reporting.
• Relevant certifications (CGEIT, CRISC, CISA, GIAC) are advantageous.

Required skills

• COBIT
• ITIL
• ISO 27001
• NIST
• POPIA compliance
• Cyber‑risk management
• Disaster‑recovery planning
• Business‑continuity planning
• Third‑party risk oversight