GEMS Jobs – 05 November 2026

To apply, click on the link at the end of the posts and all the best with your applications

Internal Audit Specialist Manager

Introduction

The position of Internal Audit Specialist Manager is vacant. The Internal Audit Specialist Manager will report directly to the Senior Manager Internal Audit Clinical and Analytics and form part of the Internal Audit Division. The position is based at Head Office.

An annual total cost to company package will apply, between R1,165,101 and  R1,456,304 based on the Scheme’s Remuneration Policy and dependent on the candidate’s skills and experience.

The closing date for applications will be Monday, 09 November 2026. 

Overview:
The Internal Audit Specialist Manager within GEMS’s Internal Audit Division, responsible for leading and executing specialised, risk-based audits across the organisation’s clinical, operational, and regulatory areas. Reporting to the Senior Manager: Internal Audit Clinical and Analytics, the position provides independent assurance on governance, risk management, and control effectiveness while driving innovation through data analytics and audit automation. The role also involves managing audit staff, overseeing project delivery, and contributing to continuous improvement initiatives to strengthen GEMS’s overall assurance framework.

---

Key Performance Areas

The Internal Audit Specialist Manager will be required to provide support to the Senior Manager Internal Audit Clinical and Analytics through the implementation of the following Key Performance Areas (KPAs):

• Lead, plan, and execute specialised risk-based audits across clinical, operational, and regulatory areas within the Scheme.
• Develop, maintain, and update the audit universe and annual internal audit plan aligned to organisational risks.
• Provide independent assurance on governance, risk management, and control effectiveness to support sound decision-making.
• Drive innovation through the use of data analytics, automation, and computer-assisted audit techniques (CAATs).
• Ensure compliance with internal audit standards, the Medical Schemes Act, and applicable organisational policies.
• Prepare and present clear, insightful audit reports and recommendations to management, the Audit Committee, and other stakeholders.
• Manage and develop internal audit staff by providing guidance, mentorship, and performance feedback.
• Oversee audit project budgets, timelines, and resources, ensuring delivery within scope and quality standards.
• Build strong collaborative relationships across GEMS departments, external service providers, and other assurance functions.
• Contribute to the enhancement of internal audit methodologies, continuous improvement initiatives, and the combined assurance framework.

---

Qualification Requirements

• A Bachelor’s degree in Internal Auditing, B Com, B Compt, Degree in Medical/Clinical Sciences or other relevant degrees.
• Minimum of 5 years of work experience in the medical scheme industry, and 3 years of experience in Internal Auditing and with at least 3 years’ experience in a managerial role.
• Any accredited IIA or ISACA certifications, or registered HealthCare Professional, and or other related certifications or active progress towards obtaining them will be advantageous.

Skills

• Strong knowledge of internal auditing standards, methodologies, and best practices (IIA Standards, COSO, ISO 31000).
• Comprehensive understanding of medical scheme operations, managed care, and healthcare regulatory environments.
• Proven experience in planning, executing, and managing complex internal audit engagements.
• Proficiency in Computer-Assisted Audit Techniques (CAATS) and data analytics for assurance delivery.
• Excellent report-writing, presentation, and communication skills, with the ability to simplify complex findings for diverse audiences.
• Strong project management, budgeting, and organisational abilities.

Behavioural Competencies

• Integrity: Demonstrates ethical conduct, professionalism, and confidentiality in all dealings.
• Analytical Thinking: Strong problem-solving and critical-thinking abilities with a focus on detail and accuracy.
• Excellence Orientation: Strives for quality, accountability, and continuous improvement.
• Innovation: Applies creative thinking and modern audit techniques to improve processes and results.
• Member-Centric Approach: Acts in the best interests of Scheme members and organisational objectives.
• Leadership: Inspires and develops others, fostering a culture of collaboration and high performance.
• Communication: Articulates ideas clearly and effectively at all organisational levels, both verbally and in writing.
• Collaboration: Builds positive relationships with internal and external stakeholders to achieve collective goals.
• Resilience and Adaptability: Performs effectively under pressure, managing change in a dynamic environment.

Desirable

• Strong understanding of healthcare funding models, claims administration, and managed care processes.

Click here to apply

Senior Manager: ICT Security Manager

Introduction

The position of Senior Manager: ICT Security is currently vacant. The incumbent will report directly to the Chief Information Officer and will be based at Head Office – Pretoria.

An annual total cost to company package will apply, between R1,613,106  and R2,016,382 based on the Scheme’s Remuneration Policy and dependent on the candidate’s skills and experience.

The closing date for applications will be Friday, 13 November 2026. 

Overview:

The Senior Manager: ICT Security will lead GEMS’ information security function, overseeing cybersecurity strategy, governance, risk, compliance, incident response, and security operations. The role is based in Pretoria, reports to the CIO, and requires strong senior-level experience in information security management.

---

Key Performance Areas (KPAs)

The Senior Manager: ICT Security will be responsible for:

• Providing strategic and operational leadership of the enterprise information security function to ensure the ongoing confidentiality, integrity, and availability of GEMS information assets.
• Establishing and maintaining the ICT Security Framework, governance structures, and enterprise security architecture.
• Leading enterprise initiatives for cybersecurity policy, standards, and awareness across on premise, cloud, and hybrid environments.
• Overseeing security operations, including incident detection, response, monitoring, and vulnerability management.
• Ensuring compliance with applicable legislation, including POPIA, the Medical Schemes Act, King IV, ISO 27001, and internal risk and audit frameworks.
• Managing business continuity and disaster recovery planning, testing, and the integration of cyber resilience measures.
• Overseeing security solution acquisition, deployment, and lifecycle management to mitigate technology, operational, and compliance risks.
• Managing security budgets, vendor and contract performance, and third party risk assessments.
• Providing regular reporting, metrics, and briefings to Executive Management and relevant governance committees on the organisation’s security posture.
• Leading and developing the information security team to ensure performance excellence, readiness, and continuous improvement through training, drills, and development plans.
• Collaborating with internal and external stakeholders including ICT, Risk, Audit, Legal, service providers, and regulators to support business aligned, secure operations.

---

Qualification Requirements

• A Bachelor’s degree or Advanced Diploma in Computer Science, Information Security, Information Systems, or a related field.
• A postgraduate qualification in Cybersecurity, IT Governance, or Business will be advantageous.
• Professional certifications (preferred): CISSP, CISM, CISA, GIAC, CCSP, or ISO 27001 Lead Implementer/Lead Auditor.
• A minimum of 8 years’ functional experience in Information Security, with at least 5 years in a managerial role leading security teams.
• Demonstrated experience in enterprise security governance, architecture, risk management, SOC operations, and incident response.
• Strong understanding of network and cloud security (Azure/AWS), POPIA, and cyber risk frameworks (ISO 27001, NIST CSF).
• Experience engaging with executive committees, audit processes, and security assurance programs.

Skills:

• Strong leadership, analytical, and strategic planning capability.
• Excellent business and technical acumen with deep understanding of cybersecurity principles.
• Proven ability to implement and govern secure‑by‑design practices.
• Effective stakeholder management and communication at senior levels.
• Demonstrated problem‑solving, risk assessment, and decision‑making skills.
• High level of resilience and adaptability when managing incidents under pressure.
• Excellent report‑writing, presentation, and documentation control skills.

Behavioural Competencies:

• Integrity: Acts responsibly, ethically, and protects sensitive information.
• Accountability: Owns delivery of outcomes, ensures governance and compliance.
• Strategic Thinking: Aligns information security with organisational strategy and risk appetite.
• Collaboration: Partners across ICT, Risk, Audit, and Business to enable secure outcomes.
• Decision-Making: Applies sound judgment under pressure.
• Innovation: Modernises security practices and drives continuous improvement.
• Resilience: Maintains composure and performance under demanding conditions.
• Service Orientation: Provides responsive, business‑aligned security support.
• People Development: Coaches, motivates, and builds team capability.

Desirable:

•  Experience within a medical scheme, financial services, or other regulated industry.
•  Practical exposure to security audits, BCP/DR exercises, and compliance assurance.

Click here to apply

We wish you all the best with your applications