IT Compliance Analyst

Position Purpose

• To oversee the internal and external IT compliance and audit processes and frameworks
• .

Role Accountabilities

Accountability: Oversee External/Internal Audit requirements

• Design and facilitate the delivery of a robust internal IT audit plan.
• Serve as key liaison for all internal/external audit activity across the organisation.
• Coordinate oversight, tracking and delivery of management actions resulting from internal/external audit activity.
• Maintain a central register of controls (key and non-key) that technology manages in support of our risk management and regulatory obligations.
• Improve documentation of the internal processes related to audit.

Accountability: Oversee IT Compliance Activities

• Examining all existing policies and procedures; developing and improving where necessary
• Aligning Internal IT standards and processes with customer expectations
• Developing reporting methodologies and reporting mechanisms to end customers.
• Running the weekly, Monthly, Quarterly reporting and audit check cycles.

Accountability: Assist with ongoing PCI compliance processes

• Manage and improve the Group’s PCI compliance processes, including documentation, monthly auditing tasks, non-technical testing and tool management, communication, data flow diagrams, risk-related questions, and annual PCI compliance attestation.
• Consult with external PCI consultant(s) regarding questions related to standards and best practices.
• Day-to-day management of PCI data loss prevention filters to prevent prohibited card-related data from being sent using our networks (non-technical).
• Foster adherence to newly introduced PCI-DSS requirements & communicate with the wider group regarding new PCI initiatives.
• Onboard various parts of our business, as well as newly acquired brands and regions, to our centrally managed PCI processes.
• Assist with tabletop exercises that help to ensure our PCI processes are followed when experiencing potential information security incidents.

Essential Qualities

• Collaborative
• Decision maker
• Problem solver
• Excellent communicator
• Efficient and effective
• Innovative and creative
• Analytical
• Proactive
• Exceptional stakeholder management skills, able to build relationships, influence and engage.
• Excellent communication skills, written and verbal coupled with highly developed analytical skills.
• A positive, curious and flexible attitude.

Qualification & Experience Requirements

What is the typical background required to competently perform the responsibilities of the job?

• Tertiary qualification or relevant specialist certification in risk, compliance or internal audit.
• Extensive experience in governance, risk, compliance, or internal audit management.
• Demonstrated experience in designing, executing and closing out internal audit activities.
• Excellent communication skills, written and verbal coupled with highly developed analytical skills.
• Time management skills under reporting deadlines
• Stakeholder engagement skills
• Data analyst skills