IT Governance, Risk & Compliance (Grc) Analyst

Job Facts

Minimum Requirements

• Qualifications and experience: Relevant 3-year tertiary qualification in Information Technology, Information Systems, Internal Audit, Risk Management or a related field.
• Minimum 3-5 years' experience in IT governance, IT audit facilitation, access management or IT compliance.
• Skills: IT Governance and Compliance.
• IT Risk Management.
• IT Audit Coordination.
• SAP Security and Access Management.
• Segregation of Duties (SoD).
• Information Security Governance.
• Governance Frameworks (COBIT, ITIL, King IV).
• ISO 27001 / NIST Knowledge.
• Regulatory Compliance (POPIA).

Responsibilities

• Senwes is looking for an IT Governance, Risk & Compliance (GRC) Analyst to facilitate IT governance, internal and external IT audit engagements, risk and compliance monitoring, and end-to-end access management for SAP and other business systems.
• The successful candidate will ensure alignment with governance, risk, security and compliance frameworks while strengthening IT controls, supporting audit readiness, and safeguarding access to critical business systems.
• Key Duties and Responsibilities Facilitate IT governance processes by maintaining governance frameworks, policies, standards, security documentation and governance reporting while supporting strategic IT decision-making.
• Coordinate internal and external IT audits by managing audit engagements, evidence collection, stakeholder communication and remediation of audit findings.
• Administer end-to-end SAP and business systems access management, including user provisioning, Segregation of Duties (SoD) reviews, access certifications and emergency access monitoring.
• Monitor IT risks and regulatory compliance by maintaining risk registers, tracking remediation activities and supporting business continuity and information security initiatives.
• Promote governance, risk and compliance awareness across the IT environment through stakeholder engagement, reporting and continuous improvement initiatives.