Plaasvervangende Direkteur: IT-Risiko

Oorsig

Plaasvervangende Direkteur wat toesig hou oor IT-risikobeheer, sekuriteitsProses en standaardimplementering by GPAA.

Vereistes

• 'n Relevante 3-jaar Nasionale Diploma/Graad in Risikobestuur/Inligtingtegnologie of ekwivalente kwalifikasie (minstens 360 krediete).
• Minimum ses (6) jaar gepaste ervaring in IKT-risiko/relevante omgewing met 3 jaar in bestuur- of middelbestuurervaring.
• Rekenaargeletterdheid wat goeie praktiese kennis van Microsoft Office-produkte insluit.
• Kennis van RisikobeheerRaamwerke (COSO, ISO31000 en ISO22301).
• Kennis van IT-Bestuur- en Beheerderingsraamwerke (COBIT, PRINCE 2).
• Kennis van IT-Bestuur- en Beheerderingsraamwerke (COBIT, PRINCE2).
• Kennis van Korporatiewe Beheerdering (King IV).
• Kennis van Barnowl-stelsel.
• Kennis van Openbare Dienspresskrifte en ander Regeringsvoorskrifte.
• Kennis van Voorgeskrewe Regulasies, Beleid, PFMA, TR.
• Analitiese en probleemoplossingsvaardigshede. Besigheidsethiek.
• Kommunikasievaardigshede sowel skriftelik as mondelings. Aanbiedings­vaardigshede.
• Beplanning- en organisasievaardigshede. Probleemoplossingsvaardigshede. Stellig.
• Benaderbaar en innovatief.
• Speler in 'n span.

Pligte

• Die suksesvolle kandidaat sal verantwoordelik wees vir: Optimalale inligtingskommunikasietegnologie-sekuriteitsProses bestuur.
• IT-Sekuriteit en standaarde in bondgenootskap met alle belanghebbendes (SITA, Diensverskaffers, ens.) implementeer.
• IT-sekuriteitvereistespesifikasies ontwikkel.
• Instandhouding van sekuriteitsbreuk-rekords monitoor.
• IT-sekuriteitsvolgenodigheid in alle areas monitoor.
• Rampspoedvoorkoming en herstelProses en rugsteun bestuur.
• Alle IT-prosedures, standaarde en beleid inzake aankope van IT-toerusting implementeer.
• Bestuur en funksionering van IT-operasies monitoor en evalueer.
• Betroubaarheid van bestaande IT-kontroles teen vereiste standaarde beoordeel.
• IT-stelsels en kontroles monitoor om potensiële risiko's te identifiseer.
• Geïdentifiseerde IT-risiko's evalueer en bewussynsverhoging eskaleer.
• Gereeld met alle belanghebbendes kommunikeer rakende geïdentifiseerde risiko's.
• Bewussynsessies aan alle personeel voorsien.
• Gereelde IT-sekuriteitsstelsels-oudit uitvoer.
• GPAA IT-risikobestuurs­strategie ontwikkel, onderhou en kommunikeer om bewussyn en naleving te maksimaliseer.
• IT-risikobeheersstrategie ontwikkel en implementeer wat organisatoriese doelwitte nakom en met GPAA se algehele strategie ooreenkom.
• Doeltreffendheid van risikovoorkoeringstrategieë deurlopend meet en aanbevelings maak om die strategie toepaslik te hersien en te wysig.
• Gereeld aan sleutelinterne belanghebbendes verslag doen om te verseker dat strategie doeltreffend is.
• Risikobewussynsessies wat IT betref uitvoer.
• Stelselsekerheid en inligtingseienaarskap monitoor.
• Lapbestuur van stelsels, antivirus en toepassings monitoor.
• Opgradering van IT-sekuriteitantivirus-sagteware verseker.
• Stelselloglêers monitoor vir sekuriteitsopenbreking en inisieer herstellingsaksies.
• Naleving van sekuriteitstandaarde deur alle belanghebbendes monitoor.

Hoe om aan te sollisiteer

To apply visit: https://erecruitment.gpaa.gov.za/

Navrae: Mapule Mahlangu Tel No: (012) 399 2639 Enquiries.erecruitment@gpaa.gov.za

Notas

Effective from 19 June 2026, the GPAA now utilises an e-Recruitment System which means all applicants must login/register to apply for positions, we only accept e-Recruitment online applications. The applicant’s profile on the e Recruitment is equivalent to the newly approved Z83, and it is the responsibility of applicants to ensure their profiles are fully completed or their applications will not be considered, as per the DPSA Practice Note. Certain documentation will still be required to be uploaded on the system such as copies of all qualifications including National Senior Certificate/Matric certificate, ID, etc., however these documents need not be certified at point of application, however certification will be required prior to attending the interview. The candidate must agree to the following: Shortlisted candidates must avail themselves for a virtual or in-person panel interview at a date and time determined by the GPAA. Please note: All shortlisted candidates, including the SMS, shall undertake two pre-entry assessments. One will be a practical exercise to determine a candidate’s suitability based on the post’s technical and generic requirements and the other must be an integrity (ethical conduct) assessment. It should be noted that the GPAA does not support the use of Artificial Intelligence (AI) in any of its recruitment and selection processes and will disqualify an application if it picks up the use of AI when completing assessments without acknowledging the source of information. Successful completion of the Nyukela Public Service SMS Pre-entry Programme as endorsed by the National School of Government, available as an online course on https://www.thensg.gov.za/training-course/sms-pre-entry-programme/, prior to finalisation of appointment, is a requirement for all SMS positions. All shortlisted candidates for SMS posts will be subjected to a technical exercise and interview. Following the technical exercise and interview, a maximum of three (3) SMS candidates will undergo psychometric assessments to assess cognitive capabilities, behavioural preferences, emotional intelligence, and integrity. Applicants must note that pre-employment checks and references will be conducted once they are short-listed and the appointment is also subject to a positive outcome on these checks, which include but not limited to: security clearance, security vetting, qualification/study verification, citizenship verification, financial/asset record check, previous employment verification and criminal record. Applicants will be required to meet vetting requirements as prescribed by Minimum Information Security Standards in line with the new DPSA Directive effective 01 April 2024. By submitting your application, it also means you consent to the GPAA processing your information for Human Resources Management purposes. It is the applicant’s responsibility to have all their foreign qualifications (this includes O and A level certificates) evaluated by the South African Qualifications Authority (SAQA), at your own expense. Upon appointment, successful candidates will be required to sign a Performance Agreement within 3 months from date of appointment and for candidates whose appointment exceeds 12 calendar months will be appointed on probation for the period of twelve (12) calendar months excluding leave taken as prescribed by Public Service Regulation 68. The status of your application will be visible on the e-Recruitment system. However, if you have not received feedback from the GPAA within 6 months of the closing date, please regard your application as unsuccessful. The candidate must take note: It is the GPAA’s intention to promote equity (race, gender and disability) through the filling of this post(s) with a candidate whose transfer / promotion / appointment will promote representativeness in line with the numerical targets as contained in GPAA’s Employment Equity Plan. Note: The GPAA reserves the right not to fill the below-mentioned posts, withdraw or to put on-hold a position and/or to re-advertise a post. MANAGEMENT ECHELON