Sihle Ndlovu

• IT Governance Management: Implementation of security measures that support the Information Security to ensure alignment with the organizational strategy,
• Implementation and maintenance of the Information Security Management System (i.e. ISO 27001).
• Lead the risk management process through the implementation of risk mitigation strategies based on Information Security best practice principles,
• Review and provide input to business cases and Technology specification documents,
• Ensure compliance with Information Security Policies, Procedures and Processes,
• Participate in developing, implementing and maintaining Information Security Policies, processes and procedures based on industry standards and best practices,
• Take appropriate measures to safeguard the company, customer and proprietary information from threats and vulnerabilities, IT Risk Management: Monitor the Risk Register to ensure that clear mitigation strategies have been defined and that the implementation of the mitigation strategies are effective, Facilitate audits, inspections, testing and/or reviews of relevant processes and management controls by various internal groups and external groups, Compile and consolidate IT risk management registers and report to the Information Security Officer Ensure compliance with the Change and Release Management process Engage with internal and external stakeholders on IT risk management procedures, Execution of the risk management tools and risk assessments to ensure accuracy and completeness of information and security practices, Compliance Management: Implement compliance processes to ensure Group IT complies to processed defined and implemented by Group Legal, Risk and Compliance, Monitors all operational processes and procedures using a compliance management platform to ensure that the company complies with all legal regulations and ethical standards, Create and manage effective action plans in response to audit discoveries and compliance violations, Tracking all compliance issues raised by Group Legal and Compliance.
• Excellent communication skills, both verbal and written.
• Proven ability to learn quickly and adapt to new situations.
• Skilled at working independently and collaboratively in a team environment.
• Self-motivated, with a strong sense of personal responsibility.

• Responsible for leading the execution of audit engagements, and provide guidance and coaching to team members.
• Client relationship management: building and maintaining relationships with key clients (managed accounts of big blue chip clients such as Momentum Group, Aspen, Blue Label Telecoms etc.)
• Facilitating meetings in the event of understanding the internal processes adhered to and obtaining the relevant information,
• Research on clients, technology trends and innovations,
• Business Development contribution by growing the skill sets,
• Responsible for planning of projects, engagement scoping, resource allocation, budget and WIP management
• Financial Management which included managing the profitability of projects and client accounts against specific budget targets.
• Identifying and logging potential leads for additional Advisory service offerings,
• Responsible for reporting and quality management (review of work products) on all project deliverables.
• Assessing clients’ inherent risks and residual risks based on the clients control environment and providing recommendations.
• Leading and representing IT Internal Audit as part of the combined assurance approach for clients. This included providing a risk profile from an audit perspective and the assurance work done as part of the combined assurance framework.

Assist in drafting of process analysis documents,

• Assist in identifying and analyzing risk and controls,
• Assist in drafting of the scope letter (engagement letter) for approval by the engagement manager,
• Drafting of Audit Programs based on process analysis and risks for approval by the engagement manager/partner,
• Responsible for conducting fieldwork and documenting the results, Assist and review sections of the work performed by juniors on the project/engagement,
• Responsible for drafting of audit reports for review by the engagement manager,
• Participate in meetings and given opportunities to discussion certain audit exceptions/findings with client.