Specialist: Information and Technology Risk

Capitec Bank Ltd.; Stellenbosch; On-site; ZAR 300,000 - 400,000; Full time

Job summary

A leading financial services provider in Stellenbosch is seeking a Specialist: Information and Technology Risk. The successful candidate will provide independent oversight on technology related risks and enhance risk awareness within the organization. Ideal candidates will have over 5 years of experience in risk management, a Bachelor's Degree in a relevant field, and knowledge of banking industry practices. This is an on-site role.

Qualifications

• 5+ years’ experience in Risk Management and/or Internal/External Auditing.
• Experience in banking industry and knowledge of data privacy compliance.
• Understanding of relevant risk methodologies and IT/Cyber Security control frameworks.

Responsibilities

• Provide independent oversight and advice on technology related risks.
• Improve risk awareness and culture via management practices.

Skills

Communications Skills

Computer Literacy (MS Word, MS Excel, MS Outlook)

Attention to Detail

Interpersonal & Relationship management Skills

Analytical Skills

Education

Bachelor's Degree in Risk and Compliance or Commerce

Honours Degree in Risk and Compliance or Commerce

Job description

Specialist: Information and Technology Risk

• To provide independent oversight, advice and assistance to the business in the identification, evaluation, assessment and treatment of information and technology related risks.
• To improve risk awareness and risk culture through challenging first-line management’s information and technology risk management practices.

Experience

Minimum:

• 5 or more years’ experience in Risk Management and/or Internal/ External Auditing.
• Proven experience in a governance and oversight capacity, e.g. IT Governance, IT Audit or Information Security
• Proven experience and understanding of Cyber and IT Security best practice and principles.

Ideal:

• Banking industry experience and knowledge
• Experience in data privacy and related compliance, e.g. RDARR, DAMA, GDPR
• Prior experience in a Cyber or IT Security role, e.g. ISO role, cyber security role, IT auditor (IT Security specialisation)
• 5+ years’ specialist experience within risk and compliance

Qualifications (Minimum)

• Bachelor's Degree in Risk and Compliance or Commerce

Qualifications (Ideal or Preferred)

• Honours Degree in Risk and Compliance or Commerce

Knowledge

Minimum:

• Experience applying/ Basic understanding of relevant risk methodologies and IT/ Cyber Security control frameworks, e.g. COBIT, ISF, ISO, NIST, ITIL, COSO, DAMA, DM-BOK
• Experience in performing risk and control assessments
• Experience in information risk management
• Experience in IT risk management including information security
• General business acumen
• Understanding of IT/ Cyber Security and Cloud Computing

Ideal:

• Banking industry experience and knowledge, including BCBS-239 (RDARR principles)
• Experience in Information Technology Audit and Continuous Auditing techniques
• Understanding of Data Management practices
• Knowledge of leading practices and regulatory requirements

Skills

• Communications Skills
• Computer Literacy (MS Word, MS Excel, MS Outlook)
• Attention to Detail
• Interpersonal & Relationship management Skills
• Analytical Skills

Conditions of Employment

• Clear criminal and credit record
• A valid driver's license and own vehicle is required

Capitec Bank is an authorised financial services provider (FSP 46669) and registered credit provider (NCRCP13). Capitec Bank Limited Reg. No: 1980/003695/06