IT Compliance Specialist at Dangote

Description

The IT Compliance Specialist is responsible for ensuring that Dangote’s IT systems and processes comply with regulatory standards and internal policies. This role involves conducting audits, risk assessments, and implementing compliance programs to safeguard data integrity and security. The ideal candidate will have a strong understanding of compliance frameworks, exceptional analytical skills, and the ability to effectively communicate compliance requirements to stakeholders.

Key Responsibilities

• Develops initiates, maintains, and revises policies and procedures for Information Security, Business Continuity and Quality assurance operation of the IT Compliance Program and its related activities to prevent illegal, unethical, or improper conduct.
• Responds to alleged violations of rules, regulations, policies, procedures, and Standards of Conduct by evaluating or recommending the initiation of investigative procedures.
• Ensures that compliance Issues/concerns within Dangote are being appropriately evaluated, investigated and resolved. • Identifies potential areas of compliance vulnerability and risk; develops and recommends corrective action plans for resolution of problematic issues and provides general guidance on how to avoid or deal with similar situations in the future.
• Provides reports regularly, and as directed or requested, to keep senior management informed of the operation and progress of compliance efforts.

Requirements

• Bachelor’s degree in information management system, Computer Science, Cybersecurity, or a related field. Master’s degree preferred.
• Relevant certifications such as CISA, CRISC, CISM, or CISSP preferred.
• Minimum of 5 years in IT compliance, risk management, or a related field.
• In-depth understanding of regulatory standards and frameworks such as GDPR, HIPAA, PCI-DSS, ISO 27001, SOX, and NIST.
• Proficiency in using relevant tools and methodologies for conducting IT audits and risk assessments, such as Nessus, Qualys, and OpenVAS.
• Strong knowledge of IT infrastructure, including servers, networks, databases, and cloud services.
• Understanding of IT service management (ITSM) and IT governance frameworks (e.g., COBIT).
• Knowledge of data protection principles and practices, including data classification, data loss prevention (DLP), and secure data handling.
• Experience with compliance management and governance, risk, and compliance (GRC) tools
• Proficiency in vulnerability management tools and practices to identify, assess, and remediate vulnerabilities.
• IT compliance policies and procedures to reflect current regulations and best practices.
• Experience with preparing and submitting regulatory compliance reports and documentation.
• Knowledge of tools and techniques for ongoing compliance monitoring and reporting.
• Exceptional analytical and problem-solving skill to identify and mitigate compliance risks.
• Excellent verbal and written communication skills for effectively conveying compliance requirements and findings.
• Strong attention to detail to ensure accuracy and thoroughness in compliance activities.
• Ability to work collaboratively with cross-functional teams and stakeholders.
• Adaptation to changing regulatory environments and organizational needs.

Key Performance Indicators

• High compliance internal audit Score
• Adherence to compliance policies and procedures.
• Resolve compliance incidents within the designated timeframe.
• Risk assessment on critical IT systems.
• Ensure Third-Party Compliance
• Continuous Improvement