General Jobs

Technology Risk & Compliance Analyst needed urgently: APPLY NOW

Technology Risk & Compliance Analyst needed urgently: APPLY NOW

Job Type: Permanent

Full job description

Technology Risk & Compliance Analyst

Support the Technology Risk & Compliance Manager to ensure security risks are appropriately managed through timely identification and assessment of risks.

Scope of the Role




Global (for security risk & compliance)

Size (Direct Reports):

Size (Indirect Reports):


Key Performance Indicators:


· Number of technology risk assessments completed annually

· Number of technology risks tracked and included in the risk register

· Percentage of technology risks captured in the risk register that have all the attributes captured

· Number of unidentified technology risks per month

· Number of touch-points with technology and business stakeholders to discuss management of ongoing security risks

· Low to moderate complexity work requiring the person to track mitigation of security risks and liaise with a number of stakeholders internally within security and wider business functions (legal risk & compliance)

Key Business Contacts (Internal)

Key Business Contacts (External)

· Wider CISO and CIO teams

· Wider Group CISO GRC team

· Group Legal team including DPO

· Group Risk

· Regulators

Decision-Making Authority:


Professional Requirements

Education/Training/Computer skills:

· Essential to have industry certifications for example CRISC, CISA or CISSP

· Essential to have knowledge or experience working with security standards and frameworks, such as the ISO31000 Risk Management Framework

· Desirable to have knowledge or training for the ISO27001 and NIST security frameworkS


As a Technology Risk and Compliance Analyst, you will be expected to demonstrate experience and knowledge across the following areas –

· Security risk management, security compliance, and basic knowledge of audits.

· Communicating technical and IT risks into tangible business risks and impacts.

· Working in a global organization (preferably within the manufacturing and/or security risk and compliance division) with stakeholders of varying seniority

· 1 – 2 years Exp within GDPR

· No Degree with Exp IT domain- covering: Tech risk Model, Penetration reports, Production System, Domain – IT Risk Mode


· Ability to design and execute key internal controls in a Technical Risk & Compliance environment

· Good understanding of technology risk management fundamentals, processes and frameworks

· Ability to communicate with stakeholders of varying seniority to explain technology risks in simple business language, with a clear scope of impact, risk ownership and accountability.

· Strong analytical skills, with a proactive work approach for identifying and remediating risks for the business and a proven ability to drive results.

· General knowledge of various Cybersecurity domains such as: data protection, identity & access management, with an ability to identify risks across these areas.

Job Type: Permanent

Salary: R48,000.00 – R50,000.00 per month

Apply Now


Back to top button