IT Risk Manager

Progressive IT Resourcing; Bellville; On-site; ZAR 600,000 - 900,000; Full time

Job summary

A leading IT service provider in Bellville is seeking an experienced IT Risk Manager. You will be responsible for defining and managing the IT Risk Management Framework, ensuring accurate reporting of IT risks and facilitating risk review meetings. Successful candidates will have at least 3 years of experience in risk management, particularly in IT, and hold a diploma or degree in a related field. This role offers an opportunity to shape risk management strategy across the organization.

Qualifications

• Minimum of 3 years Risk Management experience ideally in IT.
• Minimum of 3 years experience of IT Audit and Assurance.
• 2-5 years experience working with Risk Management tools.

Responsibilities

• Define, implement, and manage IT Risk Management Framework.
• Report on IT risks to Limited Audit & Risk committee.
• Facilitate risk review meetings across Company Service lines.

Skills

Incident Investigations

Document Auditing

Reporting and administration

Quality, compliance and accreditation

Education

3yr Diploma or Degree in Risk or Security or related IT field

Accredited Certification in Risk / Security

Tools

BWise

Cura

Barnowl

Microsoft Office (Excel, Word, PowerPoint, Visio)

Job description

This Business area is responsible for the provision of a digitally enabled technology service as a group COE, drive business and transformation and provide group-wide digital and data architecture. They operate the various technology platforms and shared services, ensure Cyber and Information Security resilience, and act as technology governance and risk orchestrator for technology across Company.

What will you do?

The role of IT Risk Manager resides in the Governance, Risk and Business Engagement function of Company Group Technology that is responsible for Governance and IT Risk Management within the Company Group. The IT Risk Manager will be actively involved in defining, implementing and management of the IT Risk Management Framework and processes for Company. The IT Risk Manager will be involved in

reporting on IT related risks in all the clusters to the Limited Audit & Risk committee.

What will make you successful in this role?

• 2nd line Audit assurance and compliance
• Accurate and effective reporting of IT Risks
• Develop Reporting templates (CURA & TPRM tool)
• Timeous escalation of new, high, or escalating risks
• Own and manage the Risk Acceptance and review process within Company Group Technology(Company) – provide input and quality assurance,
• QA activities – Review & update risk articulation of risk data on CURA
• Implement Third Party Risk Management framework
• Perform Third Party Risk Management activities – planning, assessment and reviews
• Manage and report progress on remedial activities from risk assessments
• Risk Acceptance Process for Company – lead & execute
• Facilitate Awareness campaigns for the third-party risk management tool users
• Build strong relationships with Cyber security teams
• Assist with enforcing risk-related policy compliance
• Convene & co-ordinate risk review meetings with all Company Service lines
• Capture and report on outcomes of review meetings
• Present at Company Risk Manco Meetings
• Attend and present (as required) at the following meetings :

Internal & External audit meetings

• Group IT Audit & Risk Forum meeting
• ISO forums
• Third Party Risk Assessment reviews

Qualifications

• 3yr Diploma or Degree in either Risk or Security or related IT field (min NQF 7)
• Accredited Certification in Risk / Security beneficial.

Experience

• A minimum of 3-years Risk Management experience (ideally in Information Technology)
• A minimum of 3-year experience of IT Audit and Assurance
• 2-5 years’ experience working with Risk Management tools such as BWise, Cura, Barnowl etc.
• A minimum of 3 to 5 years Microsoft Office experience (Excel / Word / PowerPoint / Visio)
• A minimum of 3-5 years’ experience in risk report writing and presentation
• Technical experience in the information security domain would be beneficial.

Knowledge and Skills

• Incident Investigations
• Document Auditing
• Reporting and administration
• Quality, compliance and accreditation

If you do not hear from us within two weeks, please consider your application unsuccessful