Manager: IT Risks & Controls

at  University of the Western Cape

Post Number
8026354
Faculty/Department
University of the Western Cape -> ICS Department -> IT Operations & Services
Type of Position
Permanent - Full Time
Length of Contract Period
Location
Main Campus - Bellville, WC ZA (Primary)
Closing Date
22/9/2024

MINIMUM REQUIREMENTS

• Possess a Bachelors degree in Information Systems or Computer Science or an equivalent NQF-7 qualification, coupled with a minimum of 5 years of experience in IT Risk Management or
• Alternatively, hold an internationally recognised risk management certification within the industry accompanied by a minimum of 8 years of relevant and equivalent experience in IT Risk Management
• Proficiency in legal, regulatory, standards, governance and other compliance requirements pertaining to IT Risk Management and a higher education environment (e.g. COBIT, ISO2700x, ISO31000, ISO27701, COSO, NIST, CIS, POPIA etc.)

PREFERRED REQUIREMENTS INCLUDE:

• The international CRISC (Certified in Risk and Information Systems Control) certification;
• An accredited certification in Problem Management (e.g. Kepner Tregoe or related ITIL intermediate course);
• Experience in IT Service Management, including incident and problem management;
• COBIT-5 certification in IT Governance;
• Experience in developing and maintaining IT Risk management policies, processes and procedures aligned to recognised industry leading practice;
• Good experiential knowledge and understanding of an enterprise business systems architecture (including data centre; server environment; storage network; databases; operating systems; applications; WAN & LAN networks);
• Good understanding of threats and vulnerabilities relating to: data management; the software development lifecycle (SDLC); project & program management; IT service continuity and disaster recovery; IT operations;
• Proficiency in business process review tools and techniques;
• Proficiency in capability assessment models and improvement techniques and strategies;
• Good understanding of information security controls, concepts and principles;
• Advanced proficiency in MS Office (MS Word, Excel, Power Point)
• Experience working in the Higher Education sector

The University of the Western Cape (UWC) seeks to appoint an experienced Information & Technology Risk Manager in its Information and Communication Services (ICS) department.
The University has set itself exciting and challenging goals in its Institutional Operating Plan (IOP), which rely heavily on ICT to deliver integrated solutions that enable and support its Academic and Research programs, and its Administrative and Professional Services departments.
This permanent position, based at the Bellville main campus, will report to the Deputy Director ICS: Governance Risk and Compliance (GRC) and will play a pivotal role in maturing the University’s IT Risk Management functional domain and capabilities in the areas of: IT Risk Identification; IT Risk Assessment; IT Risk Response & Mitigation; IT Risk and Control Monitoring & Reporting.
This is a demanding but very stimulating role, which requires an experienced individual with the appropriate breadth and depth of business and technical skills and competencies.
We invite you to join our team in a very exciting time in the University’s history.