Contribute to the design and implementation of the department strategy and roadmap by providing function-specific inputs
Establish and implement the function?s operational plans in support of the department overall strategic plan and KPIs
Budget:
Participate in department annual budgeting cycle and process
Contribute to utilizing department budget effectively, and report accurately on progress made and challenges encountered
Investigate and propose implementing strategies that result in positive financial impact for SANS and mitigate financial and operational risks
Governance:
Supervise implementation of the approved corporate governance framework and inform the Board of any impediments in the same, after alignment with CEO
Ensure corporate governance manual is in accordance with applicable laws and regulations
Keep the Board / Audit and Risk Committee (ARC) and the CEO updated with latest developments in corporate governance
Risk Management:
Develop and update the enterprise risk management framework, appetite, policies and procedures in line with professional standards and good practices, and ensure its implementation
Prepare annual risk management plan in coordination with SANS management, and ensure its implementation
Identify and research on potential threats to SANS reputation, financial sustainability, operational efficiency, technology capabilities, workforce investments and safety
Leverage the use of data, risk matrices and employee inputs to assist with identification of risks facing SANS; assess and analyze the identified risks, and recommend the mitigating actions
Utilize appropriate techniques for risk quantification, measurement and aggregation to produce high quality risk matrices
Identify risk mitigation gaps, agree the corrective action plans with management
Coordinate with management team and monitor the progress of the agreed corrective action plans
Provide advise and innovative solutions to the management regarding corrective measures for mitigation of risks
Provide supervision and guidance to the staff in performing their roles and responsibilities, and delegated tasks for risk management activities
Ensure SANS risk register is centrally maintained in the GRC directorate, and updated on a regular basis
Update the risk register after performing the risk assessment across SANS
Ensure the provision of regular risk awareness and training sessions to employees to enhance the ability of employees to conduct risk management activities
Prepare risk reports with sufficient level of risk information and analysis to support management and the Board with decision making
Provide or facilitate regular risk awareness and training sessions for employees to enhance the risk management culture and activities
Compliance:
Develop and update the compliance framework, policies and procedures in line with professional standards and good practices, and ensure its implementation
Conduct compliance risk assessment, and communicate compliance culture across all levels
Gather information related to new laws and regulations applicable to SANS pertaining to different areas, departments and processes
Supervise development of centralized repository of compliance obligations (laws, regulations, contractual and internal requirements)
Provide supervision and guidance to the staff in performing their roles and responsibilities, and delegated tasks for compliance activities
Implement compliance regulatory change management system to ensure policies and procedures are updated and an adequate level of compliance is maintained across SANS
Provide regular alerts / emails and trainings on compliance risks and obligations
Formulate recommendations on actions to address violations of laws, regulations and other compliance obligations, in consultation with legal counsel
Assist the management in devising action plans to mitigate compliance related audit observations
Develop periodic reports on outcome of compliance program
Policies, Processes and Procedures:
Propose improvements department policies, and ensure the implementation of procedures and controls across all areas of activity so that all relevant procedural/legislative requirements are fulfilled while delivering high quality and cost-effective results
Monitor day-to-day activities to ensure compliance with stipulated policies and procedures
Stimulate subordinates and contribute to the identification of opportunities for continuous improvement of systems and processes taking into account leading practices, changes in business environment, cost reduction and productivity improvementPeople Management:
Manage, guide and assist direct reports to perform their functional operations in accordance with set policies and procedures
Participate in identifying and recruiting key talent for department
Promote a high-performance working environment embracing SANS?s values
