Governance, Risk & Compliance Specialist

for introductory paragraphs and general text. The intro paragraph is the first part before "Key Responsibilities:" which is a paragraph. Then we have sections: "Key Responsibilities:" maybe a header? It is not a section header defined (like Responsibilities). But we can treat "Key Responsibilities:" as a header? The instruction says use

for section headers (e.g. Responsibilities, Qualifications, Requirements, Education, Experience, Skills, How to Apply, Key Duties, About the Role). So "Key Responsibilities:" is a header, so we should wrap it in

. Then the list items are duties. So we need to create

Key Responsibilities:

with
• for each duty. Similarly "Qualifications and Experience:" maybe a header, but the text includes "Qualifications:" and "Experience:" and "h4? The instruction says use

  for section headers like Responsibilities, Qualifications, Requirements, etc. So we need to identify those sections. The text includes "Qualifications Qualifications:" and "Experience:" and "Competencies:" maybe not a header but we can treat "Qualifications and Experience:" as a header. Also "Competencies:" maybe not required but could be included as a header? The instruction says use

  for section headers (e.g. Responsibilities, Qualifications, Requirements, Education, Experience, Skills, How to Apply, Key Duties, About the Role). So we need to map the text to those categories. Let's parse: - Introductory paragraph (the first long paragraph). That's a

  . - Then "Key Responsibilities:" is a header =>

  Key Responsibilities:

  . Then list items: we need to extract duties. The text includes multiple sentences separated by semicolons. We need to treat each as a list item. But we need to preserve word-for-word. So we need to split sentences. Let's. Let's extract sentences: 1. "Business Continuity Manager Work with teams to ensure the review and improvement of the existing departmental Business Continuity Plans (BCP); and Ensure that updated plans are published and that all team members are properly briefed and aware of their responsibilities in terms of the BCP." This seems like two sentences? Actually it's "Business Continuity Manager Work with teams to ensure the review and improvement of the existing departmental Business Continuity Plans (BCP); and Ensure that updated plans are published and that all team members are properly briefed and aware of their responsibilities in terms of the BCP." It seems two clauses separated by semicolon. But we need to keep word-for-word. Maybe treat each clause as separate list item? But it's ambiguous. The instruction: Use
  • for list items (duties, requirements, qualifications, skills). So each duty should be a list item. The text includes "Business Continuity Manager" as a title maybe part of duty. But we need to preserve word-forth. Let's treat each distinct duty phrase as a list item. Let's parse: - "Business Continuity Manager Work with teams to ensure the review and improvement of the existing departmental Business Continuity Plans (BCP); and Ensure that updated plans are published and that all team members are properly briefed and aware of their responsibilities in in terms of the BCP." Probably the duty is "Work with teams to ensure the review and improvement of the existing departmental Business Continuity Plans (BCP); and Ensure that updated plans are published and that all team members are properly briefed and aware of their responsibilities in terms of the BCP." But that's a long sentence. Maybe we treat the whole sentence as one list item. However we need to preserve word-for-word, so we should copy exactly as appears, maybe keep punctuation. Let's list all sentences after "Key Responsibilities:": 1. "Business Continuity Manager Work with teams to ensure the review and improvement of the existing departmental Business Continuity Plans (BCEO); that is the text that needs to be included in the final answer. Let's see: "Key Responsibilities:" is a header, then the list items. So the full text for the "Key Responsibilities" section is: "Business Continuity Manager Work with teams to ensure the review and improvement of the existing departmental Business Continuity Plans (BCP); and Ensure that updated plans are published and that all team members are properly briefed and aware of their responsibilities in terms of the BCP. Perform Business Impact Assessments with the Business Continuity Management Team to ensure relevance of the existing plans. Update the overarching Business Continuity documents and policies. Facilitate the execution of system and business recovery tests. Present quarterly to the Business Continuity Management Team - feedback on progress; priorities for next quarter; ensure that new and emerging risks have been properly considered e.g. electricity crisis. Facilitate the review and update of the current BCP’s to ensure that the likelihood of major business impact is limited when a major Cyber incident occurs at Truworths. Prepare Management Reports – Board, Risk Committee and Audit Committee. Information Security Take on the role of Information Officer as legally required by the POPI Act. Act as the Chief Information Security Officer (CISO) and implement and manage the Information Privacy and Security Charter. Manage on-going security improvement initiatives in the Information Security space: Collaborates with IT teams to ensure regular penetration testing and timely remediation. Collaborate with IT teams on Active Directory improvement and implementation project. Work on the current Active Directory systems and process upgrade in partnership with Cloud essentials. Ensure completion of the implementation phases. Identity Access Management Project – work with Security Operations and the relevant business areas to further mature Identity Access Management and Privilege Access management. Cyber Insurance - manage the renewal process for cyber insurance and ensures all insurer requirements are met Manage the coordination and roll out of the Information Security Training Programmes Manage the coordination of external assessments required by PCI, Insurance and as may be required by the Information Regulator. Investigate and coordinate responses to POPI complaints received from the Information Regulator and customers Coordinate and present at the quarterly Information Security Steerco meetings – risks, priorities, progress, new initiatives compliance matters. IT Improvement Initiatives Continue with current IT management workshops to ensure adoption of critical controls and best practices to mitigate risk associated with process control weaknesses. Facilitate the review of the ISD Risk Register. Other Support the business with all IT Security improvement and compliance initiatives, and Business Continuity initiatives. Coordinate, facilitate and ensure the successful completion of the IT Audit components for the financial year end audit." Now, the instruction says: "Return ONLY the cleaned job listing text." So I need to output just that text, no extra commentary. Let's make sure it's exactly as above. Let's copy it carefully. I will write it out: Key Responsibilities: Business Continuity Manager Work with teams to ensure the review and improvement of the existing departmental Business Continuity Plans (BCP); and Ensure that updated plans are published and that all team members are properly briefed and aware of their responsibilities in terms of the BCP. Perform Business Impact Assessments with the Business Continuity Management Team to ensure relevance of the existing plans. Update the overarching Business Continuity documents and policies. Facilitate the execution of system and business recovery tests. Present quarterly to the Business Continuity Management Team - feedback on progress; priorities for next quarter; ensure that new and emerging risks have been properly considered e.g. electricity crisis. Facilitate the review and update of the current BCP’s to ensure that the likelihood of major business impact is limited when a major Cyber incident occurs at Truworths. Prepare Management Reports – Board, Risk Committee and Audit Committee. Information Security Take on the role of Information Officer as legally required by the POPI Act. Act as the Chief Information Security Officer (CISO) and implement and manage the Information Privacy and Security Charter. Manage on-going security improvement initiatives in the Information Security space: Collaborates with IT teams to ensure regular penetration testing and timely remediation. Collaborate with IT teams on Active Directory improvement and implementation project. Work on the current Active Directory systems and process upgrade in partnership with Cloud essentials. Ensure completion of the implementation phases. Identity Access Management Project – work with Security Operations and the relevant business areas to further mature Identity Access Management and Privilege Access management. Cyber Insurance - manage the renewal process for cyber insurance and ensures all insurer requirements are met Manage the coordination and roll out of the Information Security Training Programmes Manage the coordination of external assessments required by PCI, Insurance and as may be required by the Information Regulator. Investigate and coordinate responses to POPI complaints received from the Information Regulator and customers Coordinate and present at the quarterly Information Security Steerco meetings – risks, priorities, progress, new initiatives compliance matters. IT Improvement Initiatives Continue with current IT management workshops to ensure adoption of critical controls and best practices to mitigate risk associated with process control weaknesses. Facilitate the review of the ISD Risk Register. Other Support the business with all IT Security improvement and compliance initiatives, and Business Continuity initiatives. Coordinate, facilitate and ensure the successful completion of the IT Audit components for the financial year end audit. Check that I didn't miss any part. Looks like all sections are covered. The text is a bit long but that's okay. The instruction is to return only the cleaned job listing text, so this should be it. Key Responsibilities: Business Continuity Manager Work with teams to ensure the review and improvement of the existing departmental Business Continuity Plans (BCP); and Ensure that updated plans are published and that all team members are properly briefed and aware of their responsibilities in terms of the BCP. Perform Business Impact Assessments with the Business Continuity Management Team to ensure relevance of the existing plans. Update the overarching Business Continuity documents and policies. Facilitate the execution of system and business recovery tests. Present quarterly to the Business Continuity Management Team - feedback on progress; priorities for next quarter; ensure that new and emerging risks have been properly considered e.g. electricity crisis. Facilitate the review and update of the current BCP’s to ensure that the likelihood of major business impact is limited when a major Cyber incident occurs at Truworths. Prepare Management Reports – Board, Risk Committee and Audit Committee. Information Security Take on the role of Information Officer as legally required by the POPI Act. Act as the Chief Information Security Officer (CISO) and implement and manage the Information Privacy and Security Charter. Manage on-going security improvement initiatives in the Information Security space: Collaborates with IT teams to ensure regular penetration testing and timely remediation. Collaborate with IT teams on Active Directory improvement and implementation project. Work on the current Active Directory systems and process upgrade in partnership with Cloud essentials. Ensure completion of the implementation phases. Identity Access Management Project – work with Security Operations and the relevant business areas to further mature Identity Access Management and Privilege Access management. Cyber Insurance - manage the renewal process for cyber insurance and ensures all insurer requirements are met Manage the coordination and roll out of the Information Security Training Programmes Manage the coordination of external assessments required by PCI, Insurance and as may be required by the Information Regulator. Investigate and coordinate responses to POPI complaints received from the Information Regulator and customers Coordinate and present at the quarterly Information Security Steerco meetings – risks, priorities, progress, new initiatives compliance matters. IT Improvement Initiatives Continue with current IT management workshops to ensure adoption of critical controls and best practices to mitigate risk associated with process control weaknesses. Facilitate the review of the ISD Risk Register. Other Support the business with all IT Security improvement and compliance initiatives, and Business Continuity initiatives. Coordinate, facilitate and ensure the successful completion of the IT Audit components for the financial year end audit.