Grade:11
Department: Governance
SUB-FUNCTION: IT compliance
Reporting to: IT compliance Manager
INTERPERSONAL SKILLS
Ability to analyze and evaluate planning materials, communicate
effectively, and to supervise the work of others
Ownership - Functional Skills - Ideas presentation and Taking
initiative - Continuous Learning -Customer Centricity
TECHNICAL SKILLS
- Experience in business continuity planning, disaster recovery,
emergency management,
- Experience and BPO n may be substituted for one another.
- Experience in IT Governance farmwork (ISO27001 , ISO22301& PCI DSS)
PROFESSIONAL EXPERIENCE:
3-5 years
EDUCATIONAL BACKGROUND:
- Bachelor’s Degree in Business Admin , Engineering or Computer Science
- CISA certification is an added plus
- CISSP, CISM, or MCSE is an added plus
- Six Sigma is an added
plus
KEY RESPONSIBILITIES
1.
Contribute to the
development and identification of emergency management plans for recovery
decision-making and communications, ensuring the continuity of critical
departmental processes and governance principles.
2.
Assist in the development,
implementation, or evaluation of business continuity, crisis, and emergency
management strategies, plans, and procedures.
3.
Monitor and track
participation in business continuity plans and emergency management programs,
providing support in matters related to the plans and programs.
4.
Assist in the review and
evaluation of risk assessments, business impact analyses, and business
continuity plans.
5.
Support activities related
to emergency management plans and services.
6.
Aid in the development,
implementation, or evaluation of current IT compliances, IT controls, disaster
recovery plans, and procedures.
7.
Assist in elements of the
audit cycle, including risk management and control management, with a focus on
IT effectiveness and compliance with applicable directives and regulations.
8.
Assist in obtaining,
analyzing, and evaluating reliable documentation, reports, data, and flow
charts.
9.
Engage in continuous
learning and development regarding rules, regulations, best practices, tools,
techniques, and performance standards.
10.
Act as RCX SPOC/PM for all
internal and external audits covering IT, leading to successful certification
11.
Monitor & control activities
assigned for IT areas to ensure compliance with internal policies and
procedures including monthly, quarterly, and annual account and activity
reviews.
12.
Identify observations and
manage remediation tasks through to closure while adhering to strict deadlines.
13.
Triage Change Management
issues and provide recommendations
14.
Work collaboratively with
Security Compliance and Legal teams to identify and manage privacy, data
protection risks, and compliance requirements.
Make broad recommendations on improving compliance-related processes
and/or procedures as they pertains to the IT department and Identify
opportunities for IT security compliance control automation