Specialist: Information and Technology Risk

Capitec Bank; Stellenbosch; On-site; ZAR 500,000 - 700,000; Full time

Job summary

A leading financial institution in Stellenbosch is seeking an experienced Risk Manager to oversee information and technology risk. The ideal candidate will have over 5 years of experience in risk management, excellent communication skills, and a relevant degree. This role focuses on enhancing risk culture and governance practices within the company.

Qualifications

• 5 or more years’ experience in Risk Management and/or Internal/External Auditing.
• Proven experience in a governance and oversight capacity, e.g. IT Governance, IT Audit or Information Security.
• Proven experience and understanding of Cyber and IT Security best practices.

Responsibilities

• Provide independent oversight and advice on information and technology related risks.
• Improve risk awareness and culture in first-line management’s risk practices.

Skills

Communications Skills

Computer Literacy

Attention to Detail

Interpersonal & Relationship management Skills

Influencing Skills

Analytical Skills

Education

Bachelor's Degree in Risk and Compliance or Commerce

Honours Degree in Risk and Compliance or Commerce

Job description

Overview

Purpose Statement

• To provide independent oversight, advice and assistance to the business in the identification, evaluation, assessment and treatment of information and technology related risks.
• To improve risk awareness and risk culture through challenging first-line management’s information and technology risk management practices.

Experience

Minimum:

• 5 or more years’ experience in Risk Management and/or Internal/ External Auditing.
• Proven experience in a governance and oversight capacity, e.g. IT Governance, IT Audit or Information Security
• Proven experience and understanding of Cyber and IT Security best practice and principles.

Ideal:

• Banking industry experience and knowledge
• Experience in data privacy and related compliance, e.g. RDARR, DAMA, GDPR
• Prior experience in a Cyber or IT Security role, e.g. ISO role, cyber security role, IT auditor (IT Security specialisation)
• 5+ years’ specialist experience within risk and compliance

Qualifications

Qualifications (Minimum)

• Bachelor's Degree in Risk and Compliance or Commerce

Qualifications (Ideal or Preferred)

• Honours Degree in Risk and Compliance or Commerce

Knowledge

Minimum:

• Experience applying/ Basic understanding of relevant risk methodologies and IT/ Cyber Security control frameworks, e.g. COBIT, ISF, ISO, NIST, ITIL, COSO, DAMA, DM-BOK
• Experience in performing risk and control assessments
• Experience in information risk management
• Experience in IT risk management including information security
• General business acumen
• Understanding of IT/ Cyber Security and Cloud Computing

Ideal:

• Banking industry experience and knowledge, including BCBS-239 (RDARR principles)
• Experience in Information Technology Audit and Continuous Auditing techniques
• Understanding of Data Management practices
• Knowledge of leading practices and regulatory requirements

Skills

• Communications Skills
• Computer Literacy (MS Word, MS Excel, MS Outlook)
• Attention to Detail
• Interpersonal & Relationship management Skills
• Influencing Skills
• Analytical Skills

Conditions of Employment

• Clear criminal and credit record
• A valid driver's license and own vehicle is required