IT GRC Analyst

About the role

Gold Fields Ghana is hiring an experienced and self-motivated Service Analyst IT GRC. Reporting to the Desktop Support Engineer, the incumbent supports the governance, risk and compliance programme for ICT by maintaining policies and control frameworks, assessing technology risks, monitoring compliance, coordinating audits and tracking remediation to protect information assets and enable reliable business operations.

Key responsibilities

• Maintain the ICT governance framework, policies, standards, procedures and control library, aligned with business requirements and approved enterprise governance practices.
• Perform and document IT risk assessments for systems, projects, vendors and changes; maintain the IT risk register and monitor treatment plans and residual risk.
• Coordinate control self-assessments, compliance reviews and evidence collection, identifying control gaps and tracking corrective actions to verified closure.
• Support internal and external audits, regulatory reviews and assurance activities by preparing evidence, responding to requests and monitoring remediation commitments.
• Monitor compliance with information security, access management, change management, backup, continuity, asset management and third-party control requirements.
• Develop GRC dashboards and reports, analyse trends, exceptions and key risk indicators and escalate material issues to stakeholders.
• Conduct third-party technology risk reviews, support due diligence, contract control requirements and periodic vendor assurance activities.
• Promote risk and compliance awareness through guidance, training and stakeholder engagement, and contribute to continual improvement of the ICT control environment.

Required profile

• Bachelor's degree in information technology, computer science, information systems, cybersecurity, risk management or a related discipline from a recognised institution.
• At least three years' relevant experience in IT audit, information security, technology risk, internal controls or compliance.
• Good interpersonal and communication skills.
• Valid Ghanaian driver's licence and ability to drive light vehicles.

Required skills

• CISA, CRISC, CGEIT, ISO 27001, COBIT, ITIL or equivalent certification is an added advantage.