IT Risk and Compliance Officer | Centurion

Ampath is seeking a detail-oriented and proactive IT Risk and Compliance Officer to support the effective management of IT risks, compliance obligations, controls, audits, and remediation activities across the organisation. This role plays a critical part in maintaining a robust IT governance framework by ensuring that risks are identified, monitored, reported, and mitigated while supporting regulatory compliance, operational resilience, and continuous improvement across the IT landscape.

Qualifications:

NQF Level 7 Degree in Information Technology, Information Systems, IT Governance, Risk Management, Compliance, Internal Audit, Cyber Security, Business Administration, or a related field.

Postgraduate qualification will be advantageous.

The following certifications will be advantageous:

Certified in Risk and Information Systems Control (CRISC)

Certified Information Systems Auditor (CISA)

COBIT Foundation

ITIL Foundation

ISO/IEC 27001 Foundation, Lead Implementer, or Lead Auditor

ISO 31000 Risk Management Training

IT General Controls (ITGC) or Technology Controls Training

Compliance, Audit, Privacy, or POPIA-related qualifications

Information Security or Security Awareness Certifications

Project Risk Management or Governance Certifications

Experience:

5-8 years' experience in IT Risk Management, IT Compliance, IT Audit, Information Security Governance, Technology Controls, Assurance, Service Governance, or related disciplines.

Demonstrated experience maintaining IT risk registers, compliance obligation mappings, audit evidence repositories, control registers, remediation trackers, and management action plans.

Experience working with IT control domains including:

Access Management

Change Management

Backup and Recovery

Vulnerability Management

Incident Management

Supplier and Third-Party Risk

Data Protection

Business Continuity

Experience working with governance and risk frameworks such as COBIT, ISO/IEC 27001, ISO/IEC 27002, ISO 31000, ITIL, NIST CSF, or similar frameworks.

Experience in regulated environments is preferred.

Exposure to healthcare, pathology, laboratory information systems (LIS), Meditech, clinical systems, or healthcare technology environments will be advantageous.

Experience collaborating with Internal Audit, External Audit, Legal, Compliance, Privacy, Security, Vendor Management, and IT Operations teams.

Skills:

IT Risk Management

IT Compliance Coordination

IT Audit Support

IT General Controls (ITGC)

Risk Assessment and Risk Register Management

Risk Treatment and Remediation Tracking

Compliance Obligation Management

Policy and Control Compliance Monitoring

Audit Finding Management

Control Testing and Evidence Management

Vendor and Third-Party Risk Awareness

Security, Privacy, and Confidentiality Control Awareness

Governance Reporting and Risk Reporting

Document and Records Management

Stakeholder Engagement and Coordination

Business Writing and Report Preparation

Analytical and Problem-Solving Skills

Attention to Detail and Strong Organisational Skills

Microsoft 365 Suite, including SharePoint, Teams, Word, Excel, and PowerPoint

Professional business writing

Responsible for coordinating and monitoring IT risk management, compliance, controls, and audit activities across the organisation. Ensures IT risks, compliance requirements, control evidence, and remediation actions are identified, tracked, reported, and managed effectively, while supporting governance, risk visibility, regulatory compliance, and continuous improvement across the IT function.

Hours of work: 40 hours per week

Work week: 5 days per week

Shift type: Day shift

What You Will Do:

As the IT Risk and Compliance Officer, you will help drive a culture of accountability, governance, and risk awareness across the IT function by:

Coordinating IT risk identification, assessment, treatment, monitoring, and reporting activities across technology teams.

Maintaining accurate and meaningful IT risk registers, compliance trackers, control records, and remediation plans.

Monitoring the execution and effectiveness of risk treatment and corrective action plans, ensuring timely resolution of identified risks and findings.

Tracking and managing IT-related compliance obligations, ensuring evidence is maintained and regulatory requirements are met.

Supporting IT General Controls (ITGC) activities through effective control monitoring, documentation, and evidence management.

Coordinating audit activities and managing the lifecycle of audit findings, management actions, and remediation efforts.

Supporting security, privacy, and confidentiality compliance initiatives in collaboration with Information Security, Legal, Privacy, and Compliance stakeholders.

Assisting in the identification, assessment, and monitoring of third-party, supplier, and vendor-related technology risks.

Providing risk and compliance guidance on projects, system changes, technology implementations, and operational initiatives.

Preparing insightful risk, compliance, audit, and governance reports for leadership and governance forums.

Building strong relationships with stakeholders across IT, Audit, Risk, Compliance, Security, and business functions.

Driving continuous improvement initiatives to enhance risk management, compliance monitoring, audit readiness, and reporting capabilities across the IT environment.