IT Risk Officer

Role Overview

We are looking for an experienced IT Risk Officer to support information security, risk, governance, and compliance activities within the organisation.

The successful candidate will assist with identifying and managing security risks, supporting regulatory requirements, and ensuring appropriate security controls and processes are maintained.

Key Responsibilities

• Conduct information security and risk assessments.

• Identify, assess, and document security and operational risks.

• Support the implementation and monitoring of security controls.

• Assist with security governance, risk, and compliance activities.

• Support compliance with POPIA and other applicable regulatory requirements.

• Review processes and systems to identify potential security or compliance gaps.

• Maintain security and risk documentation.

• Track identified risks and remediation activities.

• Assist with internal and external audits where required.

• Work with internal stakeholders to address security and compliance requirements.

• Support the development and maintenance of security policies, standards, and procedures.

• Keep up to date with relevant security, privacy, and regulatory developments.

Requirements

• Relevant tertiary qualification in IT, Information Security, Risk, Compliance, or a related field.

• Relevant security, risk, or compliance certifications.

• 3–5 years' relevant experience within information security, risk, governance, compliance, or a related environment.

• Experience conducting risk assessments.

• Knowledge and practical understanding of POPIA.

• Exposure to regulatory and compliance requirements.

• Understanding of information security principles and controls.

• Experience working with security policies, standards, or governance processes.

• Strong analytical and problem-solving skills.

• Good communication and stakeholder management skills.

• Strong attention to detail and documentation skills.

• Experience working within a regulated organisation.