Snr Specialist: Risk & Compliance
Job in
Johannesburg, 2000, South Africa
Listing for:
Transnet Company
Full Time
position
Listed on 2026-02-15
Job specializations:
-
IT/Tech
IT Consultant, Cybersecurity
-
Finance & Banking
Job Description & How to Apply Below
Position Details
Operating Division:
Transnet Rail Infrastructure Manager (TRIM)
Employee Group:
Permanent
Department: SP-ICT-Governance, Risk & Compliance-PKT
Location:
Parktown
Reporting To:
Function Specialist:
Info & Cyber Mngt
Grade: E
Reference: req
4232
The closing date is on . It is the responsibility of the applicant to ensure that HR has received the application before the closing date of the advertisement.
Position Purpose
Toensure that there is a consistent ICT governance approach (Governance, Risk,Audit and Compliance) integrated and aligned with the enterprise governance frameworks and methodologies by implementing and maintaining effectiveenabling structures, principles, processes and practices in order to achieve the enterprise’s strategies, mission, goals and objectives.
Position Outputs
Direct and control all activities related to Governance, Risk, Audit and Compliance to ensure resilience of the TRIM business and operations environment to support business outcomes and strategies. Direct and control activities to steer ICT with regards to information and technology risk in line with the Group ICT and Enterprise Risk Management Framework.Ensure that the appropriate best practices governance frameworks are implemented, monitored, measured and reported on. (e.g. COBIT, ITIL, IS 20000, TRIM ICT Operational Model, ICT Lifestyle, Project and Portfolio Management (Agile, Dev Ops, Scrum). Ensure provision of assurance services to all ICT
Functional area
s in line with King IV and COBIT framework.Review ICT process controls effectiveness. Review the operation of controls, including a review of monitoring and test evidence, to ensure that controls within ICT processes operate effectively. Ensure that the control effectiveness meets the requirements related to business, regulatory and social responsibilities. Monitor internal controls. Continuously monitor, benchmark and improve the IT control environment and control framework to meet organisational objectives.Encourage management and process owners to take positive ownership of control improvement through a continuing programme of self-assessment to evaluate the completeness and effectiveness of management’s control over processes, policies and contracts.Identify and report control deficiencies. Identify control deficiencies and analyse and identify their underlying root causes. Escalate control deficiencies and report to stakeholders.Ensure that the entities performing assurance are independent from the function, groups or organisations in scope. The entities performing assurance should demonstrate an appropriate attitude and appearance, competence in the skills and knowledge necessary to perform assurance, and adherence to codes of ethics and professional.Plan, Scope and Execute assurance initiatives. Report on identified findings. Provide positive assurance opinions, where appropriate, and recommendations for improvement relating to identified operational performance, external compliance and internal control system residual risk.Identify external compliance requirements. On a continuous basis, identify and monitor for changes in local and international laws, regulations and other external requirements that must be complied with from an IT perspective. Optimise response to external requirements. Review and adjust policies, principles, standards, procedures and methodologies to ensure that legal, regulatory and contractual requirements are addressed and communicated. Consider industry standards, codes of good practice, and best practice guidance for adoption and adaptation.Confirm external compliance. Confirm compliance of policies, principles, standards, procedures and methodologies with legal, regulatory and contractual requirements. Obtain assurance of external compliance. Obtain and report assurance of compliance and adherence with policies, principles, standards, procedures and methodologies. Confirm that corrective actions to address compliance gaps are closed in a timely manner.Evaluate, Direct and Monitor risk management. Continually examine and ensure that the Risk Register is up to date with mitigating actions by continually identify,…
Note that applications are not being accepted from your jurisdiction for this job currently via this jobsite. Candidate preferences are the decision of the Employer or Recruiting Agent, and are controlled by them alone.
To Search, View & Apply for jobs on this site that accept applications from your location or country, tap here to make a Search:
Search for further Jobs Here:
