Analyst IT GRC

POSITION:ANALYST IT GRC

JOB GRADING:C3

DEPARTMENT:ICT

Role Details:

Gold Fields Ghana is seeking to employ an experienced and self-motivated individual for the position of a Service Analyst IT GRC. Reporting to the Desktop Support Engineer, the incumbent will support the governance, risk and compliance programme for ICT by maintaining policies and control frameworks, assessing technology risks, monitoring compliance, coordinating audits and tracking remediation to protect information assets and enable reliable business operations.

Key Responsibilities:

• Maintain the ICT governance framework, policies, standards, procedures and control library, ensuring alignment with business requirements and approved enterprise governance practices.
• Perform and document IT risk assessments for systems, projects, vendors and changes; maintain the IT risk register and monitor agreed treatment plans and residual risk.
• Coordinate IT control self-assessments, compliance reviews and evidence collection; identify control gaps and track corrective actions through to verified closure.
• Support internal and external audits, regulatory reviews and assurance activities by preparing evidence, responding to requests and monitoring remediation commitments.
• Monitor compliance with information security, access management, change management, backup, continuity, asset management and third-party control requirements.
• Develop governance, risk and compliance dashboards and reports; analyze trends, exceptions and key risk indicators and escalate material issues to appropriate stakeholders.
• Conduct third-party technology risk reviews and support due diligence, contract control requirements and periodic vendor assurance activities.
• Promote risk and compliance awareness through guidance, training and stakeholder engagement, and contribute to continual improvement of the ICT control environment.

Key Requirements:

• Bachelor’s degree in information technology, Computer Science, Information Systems, Cybersecurity, Risk Management or a related discipline from a recognized institution.
• Minimum of three (3) years’ relevant experience in IT audit, information security, technology risk, internal controls or compliance.
• CISA, CRISC, CGEIT, ISO 27001, COBIT, ITIL or equivalent certification will be an added advantage.
• Demonstrate good interpersonal and communication skills.
• Valid Ghanaian driver’s license and proficiency in driving light vehicles.