IT Compliance Administrator

SUMMARY:
Job Purpose:

To support the implementation, monitoring and continuous improvement of IT governance, compliance, risk management and internal controls across Eskort.
The IT Compliance Administrator will help ensure IT systems, processes and security controls comply with legislation, company policies, audit requirements and recognised industry practices. The role will also coordinate audit evidence, monitor control effectiveness and track remediation activities.

POSITION INFO:
Minimum Requirements

QUALIFICATIONS:

• Diploma or degree in Information Technology, Information Systems, IT Auditing, Cybersecurity, Risk Management or a related field.

• 2–3 years' relevant experience in IT compliance, IT auditing, governance, information security or a similar control-focused role.
• Experience with IT General Controls and maintaining audit evidence.
• Exposure to internal or external IT audits would be advantageous.

• Understanding of POPIA and information security principles.
• Knowledge of access management, change management, backups, disaster recovery and cybersecurity controls.
• Familiarity with frameworks such as CIS or NIST would be advantageous.

• Strong analytical and problem-solving skills.
• Excellent documentation and record-keeping skills.
• Strong attention to detail.
• Ability to identify control weaknesses and compliance exceptions.
• Good written and verbal communication skills.
• Ability to work independently and follow up with stakeholders.
• High level of integrity when handling confidential information.
• Ability to manage multiple audit findings, deadlines and compliance activities.

• Assist with implementing, documenting and maintaining IT controls.
• Monitor key IT General Controls, including user and privileged access, onboarding and termination, change management, backups, IT operations and data integrity.
• Perform periodic control reviews and maintain supporting audit evidence.
• Identify control weaknesses and non-compliance and recommend corrective action.
• Track audit findings and remediation actions through to closure.
• Escalate overdue or high-risk findings to the IT Manager and relevant management.

• Assist with identifying, assessing and monitoring IT-related risks.
• Maintain IT risk, control and compliance registers.
• Support the development and review of IT policies, procedures and standards.
• Conduct scheduled compliance reviews against approved controls and policies.
• Assist with monitoring third-party compliance where IT systems, services or company information are affected.

• Monitor compliance with POPIA and Eskort information security requirements.
• Conduct periodic reviews of user, privileged and system access.
• Monitor adherence to authentication, password and access-control standards.
• Review joiner, mover and leaver processes.
• Assist with monitoring cybersecurity, backup and disaster recovery controls.
• Support security and compliance investigations and track remediation of identified issues.

• Coordinate internal and external IT audit requirements.
• Gather, organise and maintain supporting audit evidence.
• Liaise with auditors, IT personnel and relevant business stakeholders.
• Maintain an audit findings register, including owners, due dates, status and evidence.
• Follow up and escalate overdue audit actions.
• Prepare monthly or quarterly compliance reports highlighting key risks, findings and outstanding actions.

• Maintain the register of IT policies, procedures and standards.
• Coordinate policy and SOP reviews and updates.
• Monitor compliance with approved IT policies.
• Identify opportunities to strengthen controls and improve audit readiness.
• Assist with IT compliance and information security awareness activities.