Specialist: Technology & Enterprise Governance, Risk and Compliance (South Africa & Rwanda)

Specialist: Technology & Enterprise Governance, Risk and Compliance (South Africa & Rwanda) Gauteng | Hybrid At Harambee, technology, data, cybersecurity, and governance play a critical role in enabling our mission to solve youth unemployment at scale. We're looking for an experienced Specialist: Technology & Enterprise Governance, Risk and Compliance (GRC) to strengthen governance, risk management, compliance, privacy, and security assurance practices across both South Africa and Rwanda. This is an opportunity to help shape the controls, policies, and governance frameworks that support organisational growth, innovation, and impact. About the Role Reporting to the Lead: Governance, Risk & Compliance, this role serves as the technical governance, compliance, risk, and assurance expert across Information Technology, Cybersecurity, Data Privacy, and enterprise controls. You will help ensure that technology risks are effectively identified, managed, remediated, and reported while strengthening governance, compliance, audit readiness, privacy, and security practices across the organisation. What You'll Be Doing In this role, you will: Provide oversight and assurance across technology governance, cybersecurity controls, privacy requirements, and compliance obligations across South Africa and Rwanda. Monitor regulatory and governance requirements including POPIA, Rwanda Data Protection Law, ISO standards, NIST, COBIT, and other relevant frameworks, ensuring compliance risks are identified and addressed. Maintain and strengthen the organisation's policy governance environment, ensuring policies remain aligned, accessible, current, and fit for purpose. Manage and enhance technology, cybersecurity, and enterprise risk management processes, including maintaining risk registers, monitoring mitigation plans, and tracking key risk indicators. Partner with internal stakeholders to identify emerging risks, technology vulnerabilities, control weaknesses, and opportunities to improve governance maturity. Support supplier and third-party risk management by assessing technology and security risks, defining minimum security requirements, and contributing to due diligence activities. Serve as the primary liaison for internal audits, cybersecurity assessments, and assurance activities, coordinating evidence collection, management responses, remediation tracking, and reporting. Maintain oversight of audit findings and corrective actions, ensuring issues are appropriately addressed and closed within agreed timelines. Coordinate technology security reviews, cybersecurity assessments, penetration testing activities, and remediation programmes. Support privacy compliance initiatives, including cross-border processing controls, privacy programmes, data sharing agreements, and regulatory submissions in both South Africa and Rwanda. Coordinate security and privacy incident response activities, including investigation support, evidence gathering, reporting, notifications, and remediation actions. Deliver governance, cybersecurity, privacy, and compliance awareness initiatives that help strengthen organisational capability and understanding. What We're Looking For Bachelor's degree in Law, Auditing, Information Systems, Cybersecurity, or a related field. Governance, risk, security, or privacy certifications such as COBIT, ISO 27001, ITIL, CISA, or CISM will be advantageous. Minimum 5 years' experience in governance, risk management, compliance, audit, privacy, cybersecurity, or related fields. Demonstrated experience in IT governance, audit coordination, privacy operations, cybersecurity frameworks, and enterprise risk management. Strong understanding of POPIA, Rwanda Data Protection Law, and related international data protection requirements. Experience working with governance frameworks such as ISO 27001, ISO 31000, COBIT, or NIST. Strong stakeholder engagement, communication, and influencing skills, with the ability to simplify complex governance, risk, and compliance concepts. What Will Make You Successful We're looking for someone who can balance governance and compliance requirements with practical business realities. You will thrive in this role if you: Take a proactive and risk-based approach to decision-making. Have a strong eye for detail and enjoy identifying opportunities for improvement. Are comfortable engaging with senior stakeholders across technology and business functions. Can manage multiple priorities while maintaining high standards of accuracy and accountability. Enjoy translating complex regulatory, governance, and risk requirements into practical actions that support organisational success. Why Join Harambee At Harambee, you'll find more than just a governance, risk and compliance role. You'll have the opportunity to strengthen the governance, security, privacy, and risk practices that underpin our mission, helping ensure that technology, data, and digital innovation are managed responsibly and effectively. From shaping policies and improving controls to supporting audit readiness, cybersecurity assurance, and privacy compliance across South Africa and Rwanda, your work will play a key role in protecting and enabling the organisation as we continue to grow and scale our impact. We are a purpose-driven organisation that combines innovation, collaboration, and high performance to tackle one of South Africa's most pressing challenges. Here, you'll work alongside passionate and talented colleagues, be trusted to take ownership, continuously grow your expertise, and contribute to meaningful change at scale. We believe that diverse perspectives make us stronger and are committed to creating an inclusive environment where everyone feels valued, supported, and able to do their best work. Accessibility & Inclusion Harambee is committed to creating a diverse and inclusive workplace where everyone feels valued and able to contribute. We strongly encourage applications from people living with disabilities and are committed to providing an accessible and supportive recruitment process.