Systems Risk Specialist

Nedbank; Sandton; On-site; ZAR 600,000 - 800,000; Full time

Job summary

A leading financial services institution is seeking a Systems Risk Specialist. The role focuses on identifying and mitigating data and system-related risks, coordinating with IT and Risk teams to secure processes. Candidates should have substantial experience in IT risk management and system development knowledge. The position requires a degree in Information Technology and relevant certifications. This role offers exposure to comprehensive data management within a fast-paced environment.

Qualifications

• 4 - 6 years’ experience in IT risk assessment, management, and compliance.
• Hands-on experience in system development and risk management.
• Understanding of SDLC and change management practices.

Responsibilities

• Identify and mitigate data and system-related risks.
• Work with IT and Risk teams to secure data processes.
• Participate in developing Data risk policies and procedures.

Skills

System development, configuration, or scripting

Risk systems knowledge

Data management principles

Governance, Risk, and Controls

Customer Focus

Education

Degree/Advanced Diploma in Information Technology or related field

Matric / Grade 12 / National Senior Certificate

Tools

SQL

SAS

Python

Job description

Join to apply for the Systems Risk Specialist role at Nedbank

Closing date: 22 August 2025

Job Family

Information Technology

It Risk

Manage Self: Technical

Job Purpose

To identify, analyse, and mitigate data and system-related risks that could threaten the organisation. This role requires a focus of technical system development expertise and risk management acumen. The incumbent would need to operate effectively in system environments such as SAS Governance Compliance Management where system design enables compliance, governance, and technology risk management. The incumbent will use data and system insights to drive business strategy and performance, data value realisation and ensure data is managed as an organizational asset while balancing against associated risks.

Responsibilities

• Work with the appropriate Business, Risk, IT and Information Security teams to ensure processes and systems that hold and/or process data and information are secure and robust.
• Participate in the development and implementation of Data risk policies and procedures related to data management.
• Advise on possible risk issues and mitigate risks timeously by establishing risk-reporting practices across the Data Management Organisation teams which also includes the implementation of remedial actions.
• Proactively develops the Bank’s ability to identify and manage Data risk exposure.
• Participate in building and maintaining IT and Data governance frameworks and ensuring compliance with the provisions of the applicable legislation and regulations.
• Support the automation of Data risk reporting and analytics through system configuration and scripting
• Defines frameworks and principles to gather and review data risk according to the bank’s risk reporting governance frameworks and ensures that the business processes associated to these principles are embedded into the Systems during the build phase.
• Participate in building a framework that enables the aggregating of all material data Risk across Group Finance that is complete, relevant, accurate, and timeously in order to identify current and emerging risk.
• Seek opportunities to improve processes and systems by identifying and recommending effective ways to operate and adding value to the Data & Storage Ops team.
• Translate operational risk requirements into system specifications and Development tasks within the SAS GCM Environment
• Guide Solution Delivery teams on Data Risk Maturity practices and values.
• Ensure efficiency of Data Operations & Storage controls at a process-level throughout the data life cycle
• Provide feedback to the cluster DMO and other relevant forums with respect to relevant data concerns and findings.
• Ensure the DMO initiatives are in adherence and alignment to Nedbank enterprise data initiatives and strategies.
• Understand the data management principles and architecture and understands the complexities of an integrated digital environment.
• Ability to bridge technical and risk domains, translating requirements effectively.

Technical Experience Required

• Hands-on experience in system development, configuration, or scripting (e.g., SQL, SAS, Python).
• Familiarity with risk systems such as SAS GCM, GRC platforms, or custom-built risk engines.
• Understanding of system integration and data pipelines,
• Exposure to SDLC and change management practices.
• Ability to interpret risk frameworks and embed controls into system design.

Essential Qualifications - NQF Level

• Matric / Grade 12 / National Senior Certificate
• Degree/ Advanced Diploma in Information technology / information systems / related field
• Certifications in Data Management or System Development are advantageous

Minimum Experience Level

• 4 - 6 years’ experience in three or more of the following:
• Operating in the Financial services industry
• Operating in IT environment with wide knowledge of the various IT technologies
• Experience in IT risk assessment, management and compliance
• Application and/or application security design
• Data Management and DMBOK Practises
• 2 -3 years working experience in a Project Environment

Professional Bodies supplement

• DAMA SA

Technical / Professional Knowledge

• Administrative procedures and systems
• Banking knowledge
• Banking procedures
• Business principles
• Data analysis
• Governance, Risk and Controls
• Microsoft Office
• Relevant regulatory knowledge
• Relevant software and systems knowledge
• Business writing skills
• Microsoft Office Product
• Cluster Specific Operational Knowledge
• System Development Life cycle(SDLC)
• IT Risk and security principes
• Customer Focus
• Initiating Action
• Work Standards
• Managing Work
• Technical/Professional Knowledge and Skills

Note: This refinement preserves the core information and removes unrelated postings and noise.