Third Party Risk Management

Using the right combination of people, process and technology remains the Ovations approach to the fast changing information technology and business landscape. We have helped many of South Africas largest organisations to achieve sustainable business improvement through this unique approach. Our model is based on building long term relationships with our clients, as well as with partners who are not just along for the ride, but shape the journey using technologies that create real experiences. Ovations consultants are capable of working both in advisory and execution roles, from strategy through to delivery as well as supporting these solutions post implementation. Ovations provides comprehensive business improvement solutions to customers, ranging from consulting offerings in the areas of Business Process Management, Enterprise Content Management, Case Management, Architecture and System Integration. The company prides itself on its ability to build and configure innovative and custom-developed IT solutions, as well as work with packaged products. Through its know-how on how to run and support these environments, apply proven methodologies, strong project and change management principles as well as training, Ovations ensures increased business adoption and project success for its clients. Job Description: This is a 5 - month contract (renewable) with our client in the Fintech industry We are seeking an experienced IT Governance, Risk, and Compliance (GRC) Specialist to lead third-party security risk evaluations, conduct impact assessments, and safeguard our organizational risk posture. Working in a hybrid setup, you will evaluate external vendor risks, ensure alignment with global compliance frameworks, and present actionable risk intelligence directly to senior leadership. Key Responsibilities Third-Party Risk Management: Identify, assess, and mitigate security risks introduced by external vendors, suppliers, and third-party service providers. Risk Assessments & Audits: Conduct comprehensive Risk Impact Assessments, vendor due diligence, third-party audits, and contract reviews for security compliance. Governance Framework Alignment: Ensure third-party ecosystem compliance against leading frameworks (NIST, ISO 27001, PCI-DSS). Executive Advisory: Articulate complex security risks, audit findings, and remediation plans clearly to senior leadership and key stakeholders. Minimum Requirements Experience: 7 - 10 years of dedicated GRC experience with a proven track record of conducting formal Risk Impact Assessments and vendor due diligence. Education: 3-Year IT-related Degree (NQF Level 7). Required Certifications: Must hold one or more of the following: CISA, CISM, or CISSP. Framework Mastery: Deep, practical knowledge of NIST, ISO, and PCI-DSS standards.