Our client, in telecommunication services, requires an Assurance Manager to plan, direct, or coordinate activities of an organization to ensure compliance with best practice standards, including but not limited to ISO 9001, ISO 27001, ISO 14001, ISO 50001, ISO 45001, ISAE 3402 Type II, PCI DSS.<\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n
Job Title: Assurance Manager<\/strong> Job Summary:<\/strong> Minimum Requirements:<\/strong> **Kindly Note that only shortlisted candidates will be contacted**<\/p>\n
\nLocation: <\/strong>JHB – Northern SuburbsPermanentFull TimeNon EE\/AAPublished: 3 hours ago
\nReference: <\/strong>FRP002255-MAR-1<\/p>\n
\nDuties & Responsibilities:<\/strong>
\nMain Functions of the Role:<\/strong>
\nManage deliverables of the Risk and Compliance department.
\nDocument and Records Management
\nReview and upload all policies, procedures, work instructions, processes, plans, etc on MyZone, as per the Document and Records Procedure. Ensure these documents comply with the standards set for document quality, labelling etc. Ensure that the documents are technically correct (within the scope of your technical knowledge) and ensure consistency & correct cross referencing applied across the documents.
\nEnsure the Company policies, procedures etc are reviewed within the review cycle assigned to the document.
\nCompile and maintain all Risk and Compliance Department or global policies and procedures e.g. Incident Management Procedure, Change Control Procedures, Document and Records Control etc.
\nOwner of the MyZone Sharepoint policy and procedure repository.
\nPrepare management reports regarding Risk and Compliance department responsibilities e.g. ESG Report. Ensure the ESG report is prepared prior to Operational Risk Meeting, and is of a high quality, complete and accurate.
\nResponsible for ensuring all management system documents, records, evidence are maintained and available on the share drive for audit.
\nAudit
\nEnsure an company audit schedule is compiled and implemented to conduct periodic self-assessments and internal audits to ensure that policies, procedures, processes, work instructions are followed. This schedule must also include external and legal audits. Liaise with HOD and Managers to ensure audit planning is undertaken at a mutually time.
\nEnsure all legal audits are scheduled by the respective HOD and occur as planned.
\nTrack and report on audit remediation activities within the ESG report\/ Operational Risk Meeting.
\nLiaise with third party internal auditors to plan and schedule audits, and ensure proposals and purchase orders are approved timeously.
\nEnsure that all major, minor findings and observation are resolved within the required timeline and that the required response\/ evidence is provided to the internal auditors within the specified timelines.
\nEnsure that all self-assessment audit findings are documented appropriately, and that these are closed within 60 days of audit.
\nCertification and Attestation
\nAppointment as Management representative for ISO 9001 ISO 27001, ISO 14001 and ISO 50001 and fulfil responsibilities as documented in the management representative letter of appointment.
\nEnsure all certification and attestation audits occur prior to expiry and that certification\/ attestation is achieved.
\nHost the certification and attestation audit meetings & inspections and attend as management representative.
\nThe company is currently certified or has attestation for the following, however, it must be noted, that it is the responsibility of the Assurance Manager to lead the adoption of additional certification\/ attestation standards, as and when required by business:
\nISO 9001:2015 Standard
\nISO 27001:2013 Standard
\nISO 14001:2015 Standard
\nISO 50001:2018 Standard
\nPCI DSS 3.2 (Physical Security only)
\nISAE 3402 Type II for the control principles of security and availability
\nLiaise with third party certification or attestation parties to plan and schedule audits, and ensure proposals and purchase orders are approved timeously.
\nEnsure that all major, minor findings and observation are resolved within the required timeline and that the required response\/ evidence is provided to the certification\/ attestation party within the specified timelines.
\nEnsure site addition or transition audits (e.g. ISO 27001: 2013 to ISO 27001: 2021) are scheduled and undertaken prior to the SLA contractual requirements and\/or expiry rules of the standard. Ensure that the site and\/or departments affected are trained in the requirements, and have implemented the design and control policies, processes and procedures, prior to audit.
\nEnsure that all training and awareness, as required by the respective standard, is undertaken prior to audit. Liaise with the management representatives of each standard in this regards.
\nStaff Management and Development
\nPerformance management and development of the Quality Assurance Officer.
\nThird Party Assurance and Audit
\nPrepare responses to and lead audits with third party assurance auditors e.g. Trusight audit. Ensure the evidence team is prepared and provides the required evidence to prove existence of controls, in support of design. Overall ownership of the audit responses and evidence, and complying to the submission deadlines.
\nProvide assistance to external non-certification\/attestation Service Delivery Manager lead audits.
\nCompile responses to client compliance \/ audit questionnaires, as first line respondent, and where not subject matter expert, liaise with the experts to compile responses to questionnaires. Head of Operations will be the final approver\/ reviewer of responses.
\nRoot Cause Analysis, Corrective and Preventative Action Ownership
\nReview all audit reports, and ensure that appropriate and complete RCA, corrective and preventative actions are identified and implemented. Ensure that correct and complete verification is performed by the QA Officer, prior to closure of reports.
\nPerform trend analysis on audit findings over agreed period to ensure root cause correctly identified and the appropriate corrective and preventative actions are implemented.<\/p>\n
\nISO 9001:2015 Standard Implementation and Auditor certified;
\nISO 27001:2013 Standard Implementation and Auditor certified;
\nISO 14001:2015 Standard Implementation and Auditor certified preferred, but not mandatory
\nISO 50001:2018 Standard Implementation and Auditor certified preferred, but not mandatory
\nPCI DSS 3.2 experience i.e. > 3 years of auditee experience
\nISAE 3402 Type II for the control principles of security and availability experience preferred, but not mandatory
\nMinimum 8 years\u2019 experience in an standards internal audit, compliance or assurance role
\nPrior management experience preferred but not mandatory
\nMatric mandatory
\nTertiary diploma or degree preferred, but not mandatory
\nMinimum of 3 years\u2019 experience in responding to third party ISO 9001 & ISO 27001 related audit questionnaires \u2013 strong understanding of terminology, design and control requirements.<\/p>\n