Analyst: Technology Governance, Risk and Compliance – NAMPOST
Company: NAMPOST

Vacancy – Analyst: Technology Governance, Risk and Compliance (C3)

Vision: A Modern, Vibrant, Customer Centric Company that delivers value for its stakeholders.

Section: Governance, Risk and Compliance

Department: Technology

Office: Windhoek

Primary purpose of position

To support the ICT Governance, Risk & Compliance function by assisting in the execution of ICT GRC processes, assessments, and monitoring activities. The incumbent will help maintain the ICT risk register, support compliance reviews, analyse risk/control data, and assist in producing reports for management. The role contributes to institutionalising governance, risk and compliance practices across NamPost and supports the Team Lead in ensuring alignment with enterprise risk management, ICT security, audit findings and applicable legislation.

Job Summary

Employer: NAMPOST
Job Type: Full-time
Location: Windhoek, Namibia
Category: Information Technology
Closing Date: 2026-10-16

Key Responsibilities

Coordinate implementation of the ICT Governance Framework
Coordinate and Support Compliance Operating Plans
Support ICT Risk Management Initiatives
Support ICT Audits

Requirements

Bachelor’s degree in information systems, Computer Science, Auditing, Risk Management, or related field.
Minimum of 3 years’ experience in ICT governance, auditing, risk management, ICT operations, or related.
Strong analytical skills with attention to detail.
Understanding of ICT processes, risk, and controls.
Knowledge of governance framework (e.g., COBIT, ISO 27001, ITIL)
Good communication and report-writing skills.
Ability to work collaboratively with different business units.
Strong organisational, time-management and problem-solving abilities.
Ability to interpret and analyse technical and operational information.
Experience with spreadsheets, reporting tools. And/or GRC systems.
A valid Code B driver’s license

How to Apply

To apply, please visit: nampost.com.na

REF Code: C3

About the Company

NamPost is the national postal service of Namibia. It currently has 743 employees and reserves of N$ 2.51 million. The current CEO of NamPost is Festus Hangula.

View all jobs at this company →

Frequently Asked Questions

What qualifications or certifications are typically required for a Technology Governance, Risk and Compliance Analyst role at Namibian organisations like NAMPOST?

Most employers require a bachelor's degree in Information Technology, Computer Science, or a related field. Professional certifications such as CISA, CISM, CRISC, or ISO 27001 Lead Auditor are highly valued and often preferred. Some roles may accept equivalent experience combined with relevant Namibian ICT qualifications from institutions like NUST or UNAM.

What are the typical day-to-day responsibilities of a Technology GRC Analyst in Namibia?

Daily tasks include monitoring IT compliance against frameworks like ISO 27001 and POPIA, conducting risk assessments on new technology projects, and preparing governance reports for management. You will also liaise with internal auditors and external regulators, ensuring NAMPOST's technology operations meet legal and industry standards. Documentation and policy review are constant activities in this role.

How does the work culture and employer expectations differ in Namibian public sector IT roles compared to private sector?

Public sector roles at entities like NAMPOST typically emphasise formal hierarchies, structured processes, and adherence to government procurement and audit regulations. Decision-making may involve more stakeholder consultation and documentation than in agile private sector environments. Punctuality, respect for chain of command, and commitment to serving rural and underserved communities are highly valued.

What career progression opportunities exist for Technology GRC professionals in Namibia?

With experience, you can advance to Senior Analyst, GRC Manager, or Chief Information Security Officer positions within large organisations. Some professionals transition into specialised consulting roles serving Namibia's banking, mining, or public sectors. Further qualifications and demonstrated expertise in emerging areas like data privacy and cloud governance accelerate promotion prospects.

What benefits are typically offered for full-time IT positions at Namibian state-owned enterprises?

Standard packages usually include medical aid contributions, pension or provident fund membership, and generous annual leave entitlements often exceeding private sector norms. Many employers also provide housing or transport allowances, especially for positions outside Windhoek. Specific benefits vary by employer and are detailed in individual employment contracts.

How should I apply for a Technology GRC role at NAMPOST, and what do Namibian employers prioritise in candidates?

Applications are typically submitted through NAMPOST's official careers portal or advertised government employment platforms with a comprehensive CV and certified qualifications. Employers prioritise demonstrated integrity, attention to detail, and practical understanding of Namibian regulatory environments over theoretical knowledge. Highlight any experience with public sector compliance, audit processes, or stakeholder engagement in your application.