Senior Manager: Enterprise Risk Management

talentCru; Sandton; On-site; ZAR 1,000,000 - 1,600,000; Full time

Job summary

talentCru is seeking an experienced Operational and IT Risk leader to embed risk management tools across the organisation and drive enterprise risk activities. You will plan, develop and implement risk programs, identify key risks, and work with leadership to address gaps in controls.

The role requires 8–10 years in operational risk within financial environments, with exposure to Basel, COSO and ISO27001/31000 frameworks. Strong governance, training, and reporting skills are essential.

Qualifications

• 8-10 years’ experience in Operational Risk in a financial institution.
• Experience in managing operational and IT risk programs.
• Knowledge of Basel, COSO, ISO27001/31000.

Responsibilities

• Embed Operational and IT risk tools across the organisation and drive adoption.
• Plan, develop, and implement enterprise risk activities with senior stakeholders.
• Facilitate risk identification, assessment and action plans for gaps in controls.
• Monitor risk levels and provide timely reports to management and EXCO/Board.
• Coordinate governance forums to align risk with business objectives.
• Provide guidance on risk-related matters and training to staff.

Skills

Operational Risk

IT Risk

Risk Assessment

Governance

Executive Reporting

Training staff

Business Continuity

Education

Com (Accounting/Information Technology/Business/Risk Management)

Professional Certification (CISSP/CISM/CISA/CRISC)

Post-graduate qualification

Job description

The Role

Ensuring that Operational and Strategic Risk tools are embedded in the organisation. Planning, development and implementation of the client's enterprise risk activities. Initiate and recommend adoption of new operational risk management tools and procedures. Developing, reviewing and updating Enterprise/Operational Risk Policies/frameworks to reflect best practice. Facilitate the identification, assessment of key risks inherent in the operation of business units, as well as assist with the formulation of action plans to address any gaps in the mitigating measures identified. Monitoring Risk levels and providing timely reports to Management and Stakeholders on the status of risks and mitigation efforts. Identifying, analysing, and evaluating potential risks related to Information and Technology. Participating in Governance Forums to ensure alignment of Operational and IT risk to Business Objectives. Promote and support timely and complete reporting of operational risk incidents/events by Business Stakeholders. Assisting with the co-ordination of the annual EWRM programme throughout the organisation. Assisting in the development and review of the appetite risk framework. Reporting to EXCO and Board Risk and Sustainability Committee on Operational and strategic Risk activities. Assist with the coordination of Business Continuity Management activity. Preparation of the packs for the Enterprise Risk Management Forum. Provide training to Staff on Risk Management tools, policies, frameworks, and practices. Coordinating assurance activities in collaboration with Internal Audit, Compliance, and other Assurance functions to ensure comprehensive coverage and alignment. Provide guidance and advisory to Business Stakeholders on risk-related matters. Staying informed about the evolving threats, trends, and technologies to proactively address emerging risks and enhance operational and IT risk management practices.

Profile

To enable effective implementation of Enterprise Risk Management activities and provide 2LOD independent oversight within the organisations, whilst ensuring policies and framework reflect best practices.

Qualifications:

1. Com (Accounting/Information Technology/Business/Risk Management)
2. Professional Certification (e.g., CISSP, CISM, CISA, CRISC)
3. A post-graduate qualification will be an added advantage.

Knowledge & Skills:

1. 8 - 10 years’ experience in Operational Risk environment in a financial institution
2. Demonstrated experience in managing operational and IT risk programs.
3. Knowledge of Risk and IT risk industry best practices and standards such as Basel, COSO, and ISO27001/31000.