Senior IT GRC Consultant
我们正在寻找一个有着高度动机和经验丰富的 ITGRC 顾问，加入我们的团队为期三个月的合同。成功的候选人将在确保客户 IT 系统和流程有效治理，风险管理和遵守方面发挥关键作用。责任：· 进行全面的业务影响评估 (BIA) 来评估 IT 中断对业务运营的潜在影响。·审查并更新现有的灾难恢复计划 (DRP),以确保它们效率和与当前业务要求一致。· 从 GRC 视角来评估集成项目，确保符合相关规定和标准。· 识别，评估和减轻与系统，流程和数据相关的 IT 风险。· 制定和维护有关 IT 治理，风险和合规倡议的文档。· 建议实施和维持信息控制以保护敏感信息并缓解风险。• 与 IT 团队和业务利益关方合作确保遵守 ITGRC 最佳实践。资格和经验：·计算机科学，信息系统或相关领域学士学位。·至少6年以上 ITGRC 职位经验。· 深入了解 ITGRC 框架如 COBIT,ISO 27001或 NIST 网络安全框架。· 经验丰富的风险评估和有效减轻策略能力。· 在创建和维护包括 BIA 和 DRP 在内的综合文档方面有经验。·知识 IT 总控制 (ITGC) 和 IT 安全控制。·优秀的分析和解决问题技能。·强大的沟通和人际技巧。·独立工作的能力以及作为团队的一部分。优先资格：· IT GRC 框架中的认证 （例如 CISM,CRISC, CGEIT）. ·经验监管行业。·对项目管理方法的了解。如果你是一个有着高度动机和经验丰富的 IT GRC 顾问，寻找具有挑战性和有益机会，我们鼓励你申请。· 地点：约翰内斯堡，南非 · 续航时间：4个月合同 · 设置：可以尽快开始的候选人将获得远程优先级 原始地发布在喜马拉雅山
查看英文原文
We are seeking a highly motivated and experienced IT GRC Consultant to join our team for a three-month contract. The successful candidate will play a crucial role in ensuring the effective governance, risk management, and compliance of our clients IT systems and processes.
Responsibilities:
- Conduct comprehensive business impact assessments (BIAs) to evaluate the potential impact of IT disruptions on business operations.
- Review and update existing disaster recovery plans (DRPs) to ensure their effectiveness and alignment with current business requirements.
- Assess integration projects from a GRC perspective, ensuring compliance with relevant regulations and standards.
- Identify, evaluate, and mitigate IT risks associated with systems, processes, and data.
- Develop and maintain documentation related to IT governance, risk, and compliance initiatives.
- Advise on the implementation and maintenance of IT controls to safeguard sensitive information and mitigate risks.
- Collaborate with IT teams and business stakeholders to ensure compliance with IT GRC best practices.
Qualifications and Experience:
- Bachelors degree in Computer Science, Information Systems, or a related field.
- At least 6+ years of experience in IT GRC roles.
- Strong understanding of IT GRC frameworks such as COBIT, ISO 27001, or NIST Cybersecurity Framework.
- Proven ability to conduct risk assessments and develop effective mitigation strategies.
- Experience in creating and maintaining comprehensive documentation, including BIAs and DRPs.
- Knowledge of IT General Controls (ITGCs) and IT Security Controls.
- Excellent analytical and problem-solving skills.
- Strong communication and interpersonal skills.
- Ability to work independently and as part of a team.
Preferred Qualifications:
- Certification in IT GRC frameworks (e.g., CISM, CRISC, CGEIT).
- Experience in a regulated industry.
- Knowledge of project management methodologies.
If you are a highly motivated and experienced IT GRC Consultant looking for a challenging and rewarding opportunity, we encourage you to apply.
- Location: Johannesburg, South Africa
- Duration: 4 Month contract
- Set up: Remote
Preference will be given to candidates that can start ASAP
Originally posted on Himalayas