Develop, maintain and communicate the client’s ICT risk management strategy to maximize awareness and compliance
• Develop and implement ICT risk management strategy that meets organisational objectives and aligns with clients’s overall strategy.
• Identify and assess ICT related risks in the organization
• Measure the effectiveness of risk preventative strategies on an ongoing basis and make recommendations to review and amend the ICT strategy appropriately.
• Report back to key internal stakeholders at regular intervals to ensure that ICT mitigating actions is implemented.
• Conduct risk awareness sessions relating to ICT

Have an oversight of ICT Governance Frameworks
• Monitor ICT policy compliance
• Monitor the adherence of security standards by all stakeholders
• Analyze new legislation to determine impact on IT risk

Implementation of Risk Compliance
• Implement ICT Risk standards in alliance with all stakeholders
• Advise on ICT security requirements specifications
• Monitor the maintenance of security breach records
• Monitor ICT security compliance in all areas
• Monitor disaster prevention and recovery processes and backup
• Provide advise/guidance on all ICT procedures, standards and policies on procurement of ICT equipment
• Monitor all risks related to ICT projects within

Monitor and evaluate the management and functioning of ICT risk management
• Monitor the ICT systems and controls in order to identify potential risks
• Evaluate identified ICT risks and escalate the awareness
• Engage/Communicate with all stakeholders on a regular basis with regard to identified risks
• Advise in key project on ICT risk processes / risk requirements
• Provide advise plan, schedule and provide end – user training on Risk Management software
• Educate and train risk champions/coordinators and divisions on ICT risk management principles and processes, to enhance the risk management culture in the Department
• Update ICT risk registers and submit monthly and quarterly reports to Management and relevant committees• An appropriate three (3) year qualification (national diploma/degree) in Risk Management/Information Technology with a minimum of 8 experience in IT environment of which 4-5 years is within Risk Management/ IT Audit environment and at least 3 years experience should be in the capacity as a supervisor/manager
• Post graduate qualification will be an advantage
• Knowledge of risk management processes, strategies and techniques
• Knowledge of PFMA, Treasury Regulations and Pensions Acts