Specialist: Governance Risk and Compliance

Job Specification: Specialist: Governance Risk and Compliance (OT)

• Role Overview

In summary this is a senior GRC specialist position in a large international mining group looking after the governance of Operational Technology (OT) deployed in the group.

The Specialist: Governance Risk and Compliance (OT) is a critical position within the Digital Technology department, reporting to the Manager: Finance, Governance, Risk and Compliance. The role primarily focuses on ensuring effective governance, risk management, and compliance related to Operational Technology (OT) within the organization. The successful candidate will collaborate with global stakeholders, define governance structures, assess compliance with OT laws, and manage risk associated with OT systems.

Experience in the manufacturing, mining, or other Operational technology rich sectors, would be beneficial. The candidate must be willing to travel to various local and international locations when required.

Offices

• Johannesburg
• Hybrid office environment it is expected to be in the office 3 days a week and two days a week from home. This is the current status and is subject to change and management discretion.
• Open plan environment
• Key Responsibilities

Work Accountabilities

• Ensure adherence to defined governance processes across all levels of the technology organization.
• Execute global risk management processes to identify and manage material risks, including owning global controls and validation processes.
• Contribute to the development and maintenance of global policies, procedures, and standards, ensuring compliance and mediation.
• Design and implement OT Frameworks within Digital Technology.
• Roll out Group Risk (ISO 31000) and BowTie methodology within the Digital Technology Organization.
• Educate Digital Technology Managers on relevant OT frameworks and facilitate OT assessments globally.
• COBIT Framework alignment activities
• Monitor and report on OT risks, flagging risks that exceed defined thresholds.
• Assess business operations' exposure levels on OT systems and review OT resilience within the Business Continuity Management Framework.
• Collaborate with the CISO function to ensure cyber security risks are assessed comprehensively.
• Compliance - Develop a framework and roadmap for compliance with OT laws.
• Manage software asset management solution to ensure OT software license compliance.
• Help prepare quality management reports and assist with any ad-hoc management requests.

Stakeholder Accountabilities

• Collaborate with internal stakeholders, including the Business and DT departments.
• Interact with external stakeholders such as service providers and peers.
• Qualifications and Experience

Qualifications

• Bachelor's Degree in IT/OT related fields.
• Bachelors Degrees and qualifications incorporating elements of Engineering, Governance, Assurance, Risk Management, Compliance and related areas will be considered.

Certificates (preferred But Not Required)

• Management Advanced Programme (MAP)
• Certified Information Systems Auditor (CISA)
• Certified Information Security Manager (CISM)
• MDP/MBA or equivalent management qualification.

Experience

• 5+ years relevant experience in large group or corporate environments
• Experience in a related technical field (OT Governance, OT Risk Management, and OT Compliance).
• Experience in the manufacturing or mining sectors would be beneficial.
• Competencies

Technical & Functional

• Strong knowledge of risk management, including global policies, procedures, and validation methodologies.
• Familiarity with industry-standard management methods, tools, and techniques.
• Good knowledge of compliance requirements of a large international group.
• Knowledge of OT Governance Processes, OT Risk Management Methodologies and Frameworks, and OT Audit Principles.
• Familiarity with use of GRC software packages as well as Microsoft suite of products (Excel, Powerpoint, Teams, Word etc)

Behavioural & Leadership

• Excellent communication and interpersonal skills, including negotiation skills.
• Demonstrated ability to communicate fluently in English, both verbally and in writing.
• Effective leadership, inspiring and motivating others to achieve common goals.
• Proven ability to integrate corporate values into everyday duties and responsibilities.
• Resourceful collaborator, building and maintaining collaborative relationships with others inside and outside the organization.
• Being able to operate independently or as part of a team.
• Role Authorities

Team Authority: Work collaboratively with colleagues in the same managerial structure to ensure accountabilities are met, promoting a shared understanding of context and mutual adjustments to work.

Cross-Functional Authority: Work effectively with employees in different managerial structures, ensuring respective managers' accountabilities are met through advising, service giving, service getting, monitoring, coordinating, auditing, and prescribing.

• More about the company

The group is a leading global mining company, boasts a vibrant and inviting culture that beckons new individuals to join its ranks. Embracing diversity and inclusion, the company fosters an environment where every employee is valued and celebrated for their unique perspectives and contributions. Collaboration and teamwork are at the core of their culture, promoting a sense of unity and shared goals amongst employees. Additionally, the group prioritizes employee growth and development, offering ample opportunities for career advancement and professional enrichment. Joining this dynamic organization means becoming a part of a culture that champions innovation, sustainability, and a commitment to making a meaningful impact in the mining industry and the broader community.

• Remuneration

Large international listed group benefits on offer. Package will be market related considering the skills and experience of candidates.

• Application Process

Interested candidates who meet the requirements are invited to submit their applications, including a detailed CV and a cover letter addressing suitability for the role. All academic and work-related achievements to be clearly highlighted. Applications should be submitted by the application deadline.

The Group is an equal opportunity employer and encourages applications from qualified individuals regardless of gender, race, religion, nationality, or disability. Experience in the manufacturing or mining sectors would be advantageous.

Application Deadline: 30 September 2023

Disclaimer

This job description is only a summary of the typical functions of the job, not an exhaustive or comprehensive list of all possible job responsibilities, tasks, and duties. The responsibilities, tasks, and duties of the jobholder might differ from those outlined in the job description and other duties, as assigned, might be part of the job. Applicants must have the legal right to work in South Africa without the need for any employment-based sponsorship. The group reserves the right to amend or withdraw this job advert without notice.