IT Governance, Risk & Compliance Manager

Define, maintain, and operationalize IT governance practices aligned with organizational governance frameworks. Support the implementation of relevant IT policies, standards, procedures, and control frameworks. Ensure accountability and clarity of IT governance roles (e.g., control owners, process owners, evidence owners). Monitor adherence to governance requirements and escalate breaches or persistent non-compliance. Ensure compliance with applicable regulatory, legal, contractual, and internal requirements impacting IT. Coordinate compliance assessments and gap analyses, translating requirements into practical control expectations. Maintain compliance trackers and obligation registers, including deadlines, evidence requirements, and status reporting. Support management in handling exceptions, remediation plans, and required approvals. Act as the primary point of contact for first-line audit support relating to IT governance, risk, and compliance. Coordinate audit requests, including evidence compilation, walkthroughs/interviews, and responses to audit queries. Track audit findings and issues to closure, ensuring correct classification, root cause analysis, accountable ownership, and realistic remediation timelines. Provide periodic reporting on audit status, key themes, and overdue items to relevant stakeholders. Continuously review and enhance GRC methodologies, templates, control libraries, workflows, and reporting dashboards. Identify process improvement opportunities and implement enhancements to improve evidence quality, timeliness, and control assurance outcomes. Stay current with evolving IT governance, risk, and compliance expectations and recommend improvements accordingly Proven ability to lead and manage teams. Proven experience in IT governance, risk management, and/or IT compliance within a regulated environment. Experience performing or supporting IT audits, control testing, or assurance activities (internal and/or external audits). Demonstrated ability to manage end-to-end remediation of audit findings and control gaps. Strong exposure to first-line control ownership and evidence management practices. Experience coordinating with multiple stakeholders (IT operations, engineering teams, security, internal audit, compliance, and management). Familiarity with governance frameworks and risk/compliance operating models (e.g., risk registers, control frameworks, compliance obligation tracking). Strong risk and control mindset, with the ability to translate requirements into practical control expectations. Excellent stakeholder management and facilitation skills (e.g., workshops, walkthroughs, alignment sessions). Strong analytical and problem-solving skills, including root cause analysis and remediation planning. Competence in producing clear documentation, control and evidence standards, and auditable records. Strong reporting skills, with the ability to deliver concise, executive-ready risk and compliance insights. Ability to prioritize effectively and manage multiple workstreams simultaneously while meeting deadlines. Proficiency in GRC tooling and/or risk and compliance tracking systems (or similar workflow systems). Knowledge of IT governance and control concepts (e.g., access management, change management, incident and problem management, IT operations controls). Understanding of common IT risk types (technology, operational, cyber-related where relevant, third-party/vendor, data/privacy, and availability risks). Awareness of regulatory and internal compliance expectations relevant to financial services (specific regulations can be listed once confirmed). Familiarity with audit processes and evidence standards, including how findings are classified and closed. Working knowledge of security and risk concepts that commonly intersect with IT governance.Old Mutual is a premium African financial services organisation that offers a broad spectrum of financial solutions to retail and corporate customers across key market segments in 14 countries. The lines of business include Life and Savings, Property and Casualty, Asset Management and Banking and Lending. We are rooted in our purpose of Championing Mutually Positive Futures Every Day and believe that a great customer experience is anchored in a great employee experience.