Specialist: Information and Technology Risk

Capitec; Stellenbosch; On-site; ZAR 300,000 - 400,000; Full time

Job summary

A leading financial institution seeks a Risk Management Specialist to oversee technology risk assessments and enhance the organization's risk culture. Candidates should have over 5 years of experience in Risk Management, with a Bachelor's degree in a related field. Strong communication and analytical skills are required for this role, which involves advising the business on technology-related risks.

Qualifications

• 5 or more years’ experience in Risk Management and/or Internal/ External Auditing.
• Proven experience in a governance and oversight capacity, e.g. IT Governance, IT Audit or Information Security.
• Experience applying/ Basic understanding of relevant risk methodologies and IT/ Cyber Security control frameworks.

Responsibilities

• Provide independent oversight and assistance in assessing technology related risks.
• Improve risk awareness and risk culture within the business.

Skills

Communications Skills

Computer Literacy (MS Word, MS Excel, MS Outlook)

Attention to Detail

Interpersonal & Relationship management Skills

Influencing Skills

Analytical Skills

Education

Bachelor's Degree in Risk and Compliance or Commerce

Honours Degree in Risk and Compliance or Commerce

Job description

Purpose Statement

To provide independent oversight, advice and assistance to the business in the identification, evaluation, assessment and treatment of information and technology related risks. To improve risk awareness and risk culture through challenging first-line management’s information and technology risk management practices.

Experience

Minimum:

• 5 or more years’ experience in Risk Management and/or Internal/ External Auditing.
• Proven experience in a governance and oversight capacity, e.g. IT Governance, IT Audit or Information Security
• Proven experience and understanding of Cyber and IT Security best practice and principles.

Ideal:

• Banking industry experience and knowledge
• Experience in data privacy and related compliance, e.g. RDARR, DAMA, GDPR
• Prior experience in a Cyber or IT Security role, e.g. ISO role, cyber security role, IT auditor (IT Security specialisation)
• 5+ years’ specialist experience within risk and compliance

Qualifications

(Minimum)

• Bachelor's Degree in Risk and Compliance or Commerce

(Ideal Or Preferred)

• Honours Degree in Risk and Compliance or Commerce

Knowledge

Minimum:

• Experience applying/ Basic understanding of relevant risk methodologies and IT/ Cyber Security control frameworks, e.g. COBIT, ISF, ISO, NIST, ITIL, COSO, DAMA, DM-BOK
• Experience in performing risk and control assessments
• Experience in information risk management
• Experience in IT risk management including information security
• General business acumen
• Understanding of IT/ Cyber Security and Cloud Computing

Ideal:

• Banking industry experience and knowledge, including BCBS-239 (RDARR principles)
• Experience in Information Technology Audit and Continuous Auditing techniques
• Understanding of Data Management practices
• Knowledge of leading practices and regulatory requirements

Skills

• Communications Skills
• Computer Literacy (MS Word, MS Excel, MS Outlook)
• Attention to Detail
• Interpersonal & Relationship management Skills
• Influencing Skills
• Analytical Skills

Conditions of Employment

• Clear criminal and credit record
• A valid driver's license and own vehicle is required