Deputy Director: IT Governance, Security and Contract Management - Department of Information Technology Services

UP Professional and Support

DEPARTMENT OF INFORMATION TECHNOLOGY SERVICES

DEPUTY DIRECTOR: IT GOVERNANCE, SECURITY AND CONTRACT MANAGEMENT

PEROMNES POST LEVEL 4

In pursuit of the ideals of excellence and diversity, the University of Pretoria wishes to invite applications for the following vacancy.

The University of Pretoria's commitment to quality makes us one of the top research Universities in the country and gives us a competitive advantage in international science and technology development.

JOB PURPOSE

The Deputy Director: IT Governance, Security and Contract Management provide strategic leadership and oversight for IT Governance, Cybersecurity, Risk, Compliance and Contract Management across Information Technology Services. The role ensures effective IT governance, institutional compliance, cybersecurity maturity, vendor and contract management, and alignment with the University's strategic objectives.

RESPONSIBILITIES

The successful candidate's responsibilities will include, but are not limited to:

• Strategic Management and IT Governance:
• Serves as an integral member of the ITS management team;
• Collaborates with the Chief Information Officer and IT management team in institutional IT strategic planning, objectives setting, financial planning (budgeting), long term capital plans and operational planning;
• Support the Chief Information Officer with respect to technology, strategy, and planning for the organization, while supporting business growth and organizational strategic objectives;
• Develop and maintain appropriate planning systems and plans in order to achieve the desired results economically and effectively;
• Ensure that agreed business objectives and plans are achieved;
• Implement organizational structures, responsibility and authority delegated accountability, teamwork committed to the achievement of objectives, in-, out- or multi sourcing of work;
• Ensure that IT governance pertaining to ICT Governance, Security and Contract Management products are implemented and maintained;
• Ensure that IT policies and standards relevant to ICT Governance, Security and Contract Management division are implemented and maintained;
• Participate in the Information Technology Services and other related Committees;
• Contribute and participate in the institutional and IT business continuity;
• Ensure that the enterprise systems managed comply with security, audit and risk management protocols;
• Ensure adherence to IT governance frameworks;
• Manage organizational information technology standards for the division;

• Cybersecurity leadership and assurance:

• Provide strategic leadership and direction for the organization's cybersecurity programme;
• Develop, implement, and maintain cybersecurity strategies, frameworks, policies, and standards;
• Oversee the identification, assessment, and management of cybersecurity risks and threats;
• Ensure the implementation and effectiveness of cybersecurity governance and assurance processes;
• Monitor compliance with cybersecurity legislation, regulations, standards, and best practices;
• Lead the development and execution of cybersecurity risk mitigation and resilience initiatives;
• Oversee security assessments, audits, vulnerability management, and assurance activities;
• Ensure effective incident response, cyber threat management, and recovery preparedness;
• Provide cybersecurity advisory services to executive management and governance structures;
• Monitor cybersecurity performance, risks, and compliance through reporting and key metrics;
• Promote cybersecurity awareness, education, and a security-conscious organizational culture;
• Strengthen stakeholder collaboration with internal business units, regulators, auditors, and external partners;
• Oversee the integration of cybersecurity requirements into business processes, projects, and technology initiatives;

• Governance, Risk and Compliance Management:

• Provide strategic leadership and oversight of governance, risk, and compliance (GRC) functions;
• Coordinate the implementation and monitoring of the Enterprise Risk Management (ERM) framework;
• Ensure compliance with applicable legislation, regulations, policies, and governance standards;
• Oversee the development, review, and implementation of governance and compliance policies and procedures;
• Monitor the effectiveness of internal controls and coordinate assurance activities;
• Facilitate risk identification, assessment, mitigation, and reporting processes;
• Support governance structures, including audit and risk committees, through quality reporting and secretariat support;

• ICT contract and vendor management:

• Provide oversight of contracts and supplier performance;
• Provide strategic leadership and direction for the organization's contract governance and commercial management function;
• Ensure the establishment and implementation of an effective contract management framework that supports organizational objectives;
• Drive contract governance, accountability, and compliance across the organization;
• Provide executive oversight of the organization's contract portfolio to maximize value, manage risk, and ensure service delivery outcomes;
• Lead the development and implementation of strategies to improve contract performance, operational efficiency, and commercial outcomes;
• Ensure alignment of contract management practices with organizational, regulatory, and governance requirements;
• Oversee the management of strategic supplier, partner, and stakeholder relationships;
• Direct enterprise-wide contract risk management and mitigation initiatives;
• Provide strategic advice and recommendations to senior leadership on contractual, commercial, and governance matters;
• Monitor and evaluate the effectiveness of contract management systems, controls, and performance measures;
• Champion continuous improvement, innovation, and best practices in contract and commercial management;
• Ensure effective resource planning, budgeting, and utilization within the contract management function;

• Financial and Human Resource management:

• Prepare and manage operational and capital budgets;
• Lead performance management, succession planning, and staff development;
• Ensure compliance with HR policies and employment equity objectives;

• Stakeholder engagement and service excellence:

• Build relationships with academic and professional service departments;
• Represent ITS in institutional governance forums;
• Engage external partners, auditors, regulators and vendors;
• Manage internal and external stakeholders for service delivery;
• Engage with key stakeholders to identify business needs, and the translation of these needs into IT solutions;
• Manage the contractual relationships and financial aspects of the portfolio of external service providers/contractors engaged to complement internal resources;
• Provide inputs on proposed IT initiatives within Faculties and Professional Services departments;
• Build and maintain key relations and communication with stakeholders;
• Manage relationships and negotiations with a range of vendors for UP's Information Technology (IT) contracts and governance related matters;
• Manage vendor Service Level Agreement's to ensure the institution is receiving support and delivery.

MINIMUM REQUIREMENTS

• A relevant four-year Degree / Honours / or NQF level 8 qualification in:
• Information Technology;
• Computer Science;
• Information Systems;
• Cybersecurity:
• Information Security;
• Informatics;
• A relevant ICT field;

• Eight years' experience (Of which three years in management) in;
• IT management, strategic IT planning, financial management and business alignment;
• Governance, risk, cybersecurity, compliance and contract management;
• Financial, people and vendor management;
• IT service management, ITIL processes, and IT projects.

REQUIRED COMPETENCIES (SKILLS, KNOWLEDGE AND BEHAVIOURAL ATTRIBUTES)

• Knowledge:
• Knowledge of:
• Hum