IT Governance Manager

Job Title: IT Governance Manager Company: Clicks Group Limited Job Category: SAP MM Roles & Responsibilities: INTRODUCTION We are seeking an experienced and technically competent IT Governance Manager to lead the IT Governance, Risk and Compliance (GRC) framework across the Group, including UPD and other Group entities. The role covers IT risk, data governance, audit and compliance, change and release management, service continuity, disaster recovery and third\-party risk, and requires the technical depth to challenge technology teams, architecture and controls credibly. JOB PURPOSE To design, implement and continuously improve the Group's IT Governance, Risk and Compliance framework, operating model, policies and controls across Clicks Group, including UPD and other Group entities, aligned with King V, business objectives and the Group's risk appetite. The role provides technically credible oversight and challenge of technology risks, architecture, controls and operational practices, ensuring effective risk management, control assurance, audit readiness, resilience governance and third\-party technology risk management. Reporting to the IT Governance \& Security Executive, the incumbent works collaboratively with the Cyber Security Manager, technology leadership, business stakeholders and assurance functions to strengthen accountability, regulatory compliance and sustainable control effectiveness. ##### Job description RESPONSIBILITIES * Develop and implement the Group IT governance strategy and framework across Clicks, UPD and other Group entities, aligned with King V, COBIT, ISO/IEC 38500, risk appetite and regulatory requirements. * Act as custodian of Group IT policies, standards and procedures, managing review cycles, version control, approval and publication. * Support the ISO/IEC 27001 and NIST\-aligned ISMS with the Cyber Security Manager, aligning technology risk, control assurance and reporting. * Set governance requirements for emerging technologies, including AI, cloud and automation, covering risk, data protection and acceptable use. * Establish data governance requirements, including ownership, classification, quality and lifecycle, with business and technology data owners. Risk, Audit and Controls * Run IT risk forums and maintain the consolidated IT risk register in line with enterprise risk management, including formal risk acceptances and policy exceptions with compensating controls and review dates. * Manage internal and external IT audits and compliance activities (e.g. ISAE 3402, PCI DSS and SOC 2\) as primary auditor liaison, validating evidence, challenging unsupported findings and driving timely remediation through combined assurance. * Manage the quarterly IT General Controls self\-assessment, including risk and control matrices, control owner evidence, and design and operating effectiveness testing, supporting the Group’s internal financial controls assurance. * Oversee IT governance and controls, including SAP S/4HANA access, change and authorisation controls, vendor\-managed systems and audit readiness. * Oversee IT procurement governance, including contract and licensing standards and transparent RFP, RFQ and RFI evaluation. * Manage vendor contracts, performance and risk, including review of third\-party assurance reports and oversight of managed service provider access. * Define IT governance KPIs and risk indicators, and coordinate reporting to executive management, the Audit and Risk Committee and the Board. * Lead, develop and performance\-manage the IT Governance team, including change and release and service continuity staff, ensuring adequate capacity and skills. * Support governance budgeting and build risk and control awareness among technology teams and control owners. * Establish and oversee technology third\-party risk and assurance requirements, including supplier due diligence, security and compliance assessments, contractual control obligations, third\-party assurance reporting, managed service provider access and ongoing risk monitoring. * Provide governance oversight of IT procurement processes, including compliance with approved procurement policies, evaluation standards, licensing controls and technology risk requirements JOB OBJECTIVES Ensure consistent IT Governance across Clicks Group and its entities; strengthen technology risk, control and compliance management; improve audit readiness and remediation; and support resilient, accountable and well\-governed technology operations.  Strong technical competency is essential, with the ability to assess enterprise infrastructure, applications, cloud services, identity and access management, architecture and control evidence.  Proven track record in designing, implementing and testing IT General Controls and application controls, preferably in SAP environments, and in managing audit findings through to sustainable closure.  Sound analytical judgement and the ability to manage ambiguity and complexity when assessing technical and governance information.  Leading and Supervising Work Location: Cape Town, WC, South Africa Availability: Full time

* Establish and oversee technology\-related data governance and control requirements in collaboration with business data owners, the Data \& Intelligence function, Information Security and Privacy, covering data classification, access, protection, retention, lifecycle and control assurance. ##### Minimum requirements QUALIFICATIONS  A degree in Information Technology, Information Systems, Computer Science, Commerce or Risk Management, or a relevant equivalent qualification.  Minimum 5 years of relevant IT experience, including IT governance, risk or audit in a complex enterprise, and at least 2 years managing a team.  Strong understanding of regulatory and compliance requirements, including POPIA, PAIA and PCI DSS, and of Information Regulator reporting obligations.  Experience providing IT Governance oversight across multiple business units, divisions or legal entities. JOB\-RELATED SKILLS  Ability to translate technical weaknesses into clear business risks, governance requirements and actions. Key Skills: Procurement Salary: Not disclosed