Hands-on governance practitioner responsible for policy design, compliance monitoring, audit reporting and risk management across all three pillars. Works closely with Security, Non-Financial Risk and Compliance teams to ensure enterprise standards are met.
Key Responsibilities
- Design, document and maintain governance policies, standards and acceptable-use frameworks for AI tools
- Configure and manage DLP policies, data classification rules and sharing controls
- Build and maintain the risk register; conduct periodic risk assessments
- Prepare audit reports, compliance dashboards and evidence packs for internal and regulatory reviews
- Monitor usage patterns and flag policy violations or anomalies
- Liaise with Security and Non-Financial Risk to align AI governance with enterprise risk frameworks
Required Experience and Qualifications
- 6–10 years in IT governance, risk management, compliance or information security
- Hands-on experience with Microsoft 365 compliance tools (Purview, Compliance Manager, DLP)
- Understanding of regulatory requirements relevant to financial services (e.g., POPIA, model-risk frameworks)
- Strong analytical and documentation skills; experience producing audit-ready evidence
- Relevant certifications advantageous: CISM, CRISC, ISO 27001, Microsoft Security certifications