The main purpose of this position is to mature the information technology (IT) control environment through the implementation and monitoring of a sound IT control framework, to assess the adequacy and effectiveness of controls, as well as to provide assurance that the South African Reserve Bank's (SARB) information and communications technology (ICT) systems and investments are adequately protected.
Detailed description
The successful candidate will be responsible for the following key performance areas:
- Develop a sound IT control framework to assess the adequacy and effectiveness of controls.
- Provide assurance that the SARB's ICT systems and investments are adequately protected.
- Drive the planning, execution, governance, tracking and reporting of the Control Self-Assessment (CSA) program.
- Ensure that control assessment programs are completed in accordance with established SARB guidelines and accurately reflect the adequacy and effectiveness of the controls tested and the associated level of risk.
- Proactively assess the adequacy and operating effectiveness of key IT general controls at or near day one of go-live for key projects within the SARB.
- Act as the subject matter expert, actively engaging the process owners and control partners to ensure all controls are accurately designed and documented, and key risks are being properly identified and mitigated.
- Act as key contact with the process owners and control partners to develop remediation plans and ensure that key timelines are met, proactively enhancing the control environment.
- Manage quality assurance reviews of CSA data (including reporting, escalation and tracking).
- Design and operate a meaningful management reporting, including periodic controls analysis.
- Collaborate with other work streams within the IT functions.
- Locations
- Pretoria, Gauteng, South Africa