(982) Senior Information and Technology Risk Analyst - BSTD

The successful candidate will be responsible for the following key performance areas:

• To embed SARB Group risk management frameworks, methodologies, processes and systems as well as embed related policies.
• To develop, maintain and embed Information & Technology (I&T) SARB risk management frameworks and ensure alignment to the SARB Group risk management frameworks.
• To develop risk management quality criteria and perform quality reviews on risk management outcomes.
• To identify, collate, analyse and report on emerging I&T risks to the SARB and SARB group.
• To facilitate strategic Information & Technology (I&T) risk management processes in the SARB and SARB group in accordance with the SARB Group Risk Management Framework.
• To facilitate I&T application and general IT risk assessments to enable business to proactively manage risks relating to technology.
• To assess, analyse and embed IT general risk and control for IT for business processes.
• To coordinate integration of IT general risk and control for ‘IT for IT’ as well as ‘IT for business’ frameworks.
• To identify and coordinate risk management training needs as well as conduct related training.
• To compile and co-ordinate reporting on I&T related risk management outcomes and activities to the SARB Group’s executives and risk oversight committees.
• To develop the Bank-wide I&T risk overarching plan, co-ordinate and embed operational risk and continuous risk management across the SARB (KRIs, Risk Incidents, Emerging risks).
• To develop risk awareness campaigns to educate stakeholders, influence behaviour and promote a positive as well as proactive risk management culture across the SARB and SARB Group.
• To analyse risk data and information on the various risks registers to identify trends, interconnectedness/polycrisis, commonalities and create qualitative risk reporting and derive reliable business intelligence/insights for management to enable decision making.
• To engage with stakeholders to provide information and support on risk management matters.
• To research and benchmark leading risk management processes and developments propose improvement accordingly.
• To analyse and understand the Bank’s environment (internal and external) in order to support and guide the identification of risks and opportunities to enable decision making.
• To provide input to other specialised risk management processes i.e. policies, methodologies, frameworks (Financial risk management, Cyber and information security, Privacy, Physical security, strategic and operational resilience etc.).
• To manage the implementation of the BSTD strategic and operational risk treatment action plans, and report on their progress and impact on risks.
• To oversee the integration between RMCD and other specialised risk areas.

To be considered for this position, candidates must be in possession of:

• A minimum of an Honours Degree (Information and Technology (IT) or any other relevant NQF 8 degree) OR equivalent;
• A minimum of 8-10 years of experience in the relevant environment (Audit, IT and Risk).
• Certified in Risk and Information’s Systems Control (CRISC), Certified Information Systems Auditor (CISA), CIA, CRM, FRMP, and/or relevant I&T.
• Risk Industry Certification is essential.

• ITIL certification, COBIT 2019 Certification and Certified in the Governance of Enterprise IT (CGEIT) will be an added advantage.