Group IT Governance Manager

Clicks Group is seeking an experienced and technically competent IT Governance Manager to lead the IT Governance, Risk and Compliance (GRC) framework across the Group, including UPD and other Group entities. This role is based in the City of Cape Town, Western Cape, South Africa. Join us to strengthen technology risk, control and compliance management.

As a leader in the healthcare market, Clicks Group is committed to increasing access to affordable primary healthcare for all South Africans. Founded nearly 58 years ago, Clicks Group is the country’s leading health, beauty and wellness retailer and the largest retail pharmacy chain.

We are passionate about leading innovation within our Group and provide unlimited opportunities for our people. Looking for a technically credible leader to join our team.

Company Overview

Clicks Group is the country’s leading health, beauty and wellness retailer and the largest retail pharmacy chain, with an expanding network of over 1000 stores and 779 pharmacies supported by a growing omni channel presence. UPD is the country’s leading full-range pharmaceutical wholesaler and distributer, providing the distribution capability for the group’s healthcare strategy.

Listed on the JSE since 1996, Clicks Group’s sustained financial performance and growth in shareholder value has seen the group included in the FTSE/JSE Top 40 Index for the past eight years. We care about and contribute to the wellbeing of people, the environment and communities.

Quick Details

• Salary Range: Not Specified
• Job Type: Full-time
• Qualifications: A degree in Information Technology, Information Systems, Computer Science, Commerce or Risk Management, or a relevant equivalent qualification.
• Experience: Minimum 5 years of relevant IT experience, including IT governance, risk or audit in a complex enterprise, and at least 2 years managing a team.

Key Responsibilities

• Develop and implement the Group IT governance strategy and framework aligned with King V, COBIT, ISO/IEC 38500, risk appetite and regulatory requirements.
• Act as custodian of Group IT policies, standards and procedures, managing review cycles, version control, approval and publication.
• Run IT risk forums and maintain the consolidated IT risk register, including formal risk acceptances and policy exceptions.
• Manage internal and external IT audits and compliance activities as primary auditor liaison.
• Establish and oversee Group IT change and release governance, ensuring technology changes are appropriately risk-assessed, authorised, tested, implemented and evidenced.
• Oversee IT procurement governance, including contract and licensing standards and transparent RFP, RFQ and RFI evaluation.

Requirements

• Strong technical competency is essential, with the ability to assess enterprise infrastructure, applications, cloud services, identity and access management, architecture and control evidence.
• Strong knowledge of King V and recognised IT Governance, risk and security frameworks, including COBIT, ITIL, ISO 27001 and NIST, together with data governance principles and practices.
• Strong understanding of regulatory and compliance requirements, including POPIA, PAIA and PCI DSS, and of Information Regulator reporting obligations.
• Proven track record in designing, implementing and testing IT General Controls and application controls, preferably in SAP environments.
• Ability to translate technical weaknesses into clear business risks, governance requirements and actions.
• Excellent written, verbal, presentation and report-writing skills.

Benefits

• Unlimited opportunities for people within the Group.
• Work in a leading healthcare market company committed to increasing access to primary healthcare.
• Opportunity to lead and develop the IT Governance team.
• Contribute to the wellbeing of people, the environment and communities.
• Be part of a company passionate about leading innovation.