Stephen Johnstone

Technology Risk & Data Specialist at Discovery Limited

Centurion, Gauteng, South Africa

About

I realised, work is only what you need to do for a living, but it is not who you are. Although I am a professional in the areas of IT, CyberSecurity, Information Security, Privacy and Project Risk Management. I love Data Analytics and to automate everything. And most recently I’ve moved my focus to App Development. As I have lots of business ideas that I want to see to fruition. Watch this space… My first Business App is planned to be launched before June 2026. Today is 1 Jan 2026.

Experience

  • Discovery Limited (Full-time · 11 yrs 6 mos)
    • Technology Risk Specialist & Data Analyst
      Dec 2024 - Present · 1 yr 7 mos

    • Head of IT Risk (SA Composite)
      Apr 2020 - Nov 2024 · 4 yrs 8 mos

      - Report to the SA Composite RCC on IT Risk related matters - Create an IT Risk and Control Framework for the SA Composite - Create a Project Risk Management Framework - Monitor Technical Debt across the Group - Establish IT Risk Appetite and Tolerance Statements - Implement an automated reporting framework for Combined Assurance for Discovery Group across all lines of Defence

    • IT Risk Specialist
      Jan 2015 - Apr 2020 · 5 yrs 4 mos

      - Identify, monitor and assess IT related risks across the SA Composite from a 1st line oerspective - Conduct RCSAs, PCSAs and Deepdives on IT related processes. - Perform trend analysis on IT Risks, IT Incidents, etc. - Develop IT KRIs and Dashboards to monitor risk exposure to IT processes and services. - Conduct IT Risk & IT Project Risk Workshops

  • Internal IT Auditor at Bridge South Africa
    Jul 2012 - Dec 2014 · 2 yrs 6 mos

    • Maintain the IT Control Framework; • Perform data analysis using IDEA and SQL; • Plan and perform detailed reviews regarding GCR, ACR and database architectural; • Perform internal audit work as set out by the internal audit plan or on ad hoc matters; • Supervising and coaching an internal audit staff member; and • Compiling electronic working papers and working paper files

  • External IT Auditor at Nexia SAB&T
    Apr 2010 - Jun 2012 · 2 yrs 3 mos

    • Compile audit planning memorandums • Document work performed • Supervise/execute audit procedures • Assist in compiling and finalising reports • Perform data analysis using ACL • Planning and performing detailed reviews regarding GCR, ACR and SDLC

  • General Manager at Tropical paradise 157 T/A Steers, FishAways and Debonairs
    May 2007 - Mar 2010 · 2 yrs 11 mos

    • In charge of managing 5 Fast Food restaurants simultaneously consisting of a minimum of 40 staff members and an annual turnover of approx. R13.2 mil; • Market management and ensuring good profit margins; • Conducting of stock takes, staff recruitment, disciplinary hearings, stock ordering, customer liaison and store evaluations;