Manager: Governance, Risk and Compliance

SUMMARY:
Can you spot risk before it goes rogue, and turn governance into a competitive advantage? If frameworks, controls and compliance standards are your comfort zone and you know how to align IT risk with real business strategy, this GRC Manager role will put you in control of the command centre.

POSITION INFO:
Our client is a major automotive group based in Johannesburg East, operating at scale with complex systems and a growing digital footprint. They’re looking for an IT Governance, Risk & Compliance (GRC) Manager to design, implement and strengthen a robust IT GRC framework across the organisation.  If you enjoy building frameworks, tightening controls and driving maturity across risk landscapes, this is your opportunity to lead from the front.

Key Responsibilities:

• Lead and evolve the IT GRC framework aligned to business strategy
• Implement governance policies, standards and best practices
• Oversee IT audits and control effectiveness
• Identify, assess, and manage enterprise-wide IT risks
• Monitor mitigation plans, self-assessments and third-party risk
• Ensure compliance with GDPR, POPIA, COBIT, ITIL, NIST and related standards
• Coordinate audit cycles and drive remediation efforts
• Maintain IT policies, controls, and governance reporting
• Report risk, cybersecurity and DR metrics to executive committees
• Conduct governance maturity reviews and lead continuous improvement
• Lead cross-functional teams and engage senior stakeholders confidently

• MBA and / or certifications such as CISA or CRISC preferred
• 5 to 7 years’ experience in IT Governance and Risk Management
• Strong knowledge of IT governance frameworks and compliance standards
• Proven ability to build and mature IT control environments
• Strong communication and stakeholder engagement skills