IT RISK MANAGER
| Location | JHB - Northern Suburbs, South Africa |
| Date Posted | July 24, 2022 |
| Category |
Management
|
| Job Type |
Full-time
|
| Currency | ZAR |
Description
Provide oversight and assurance on the compliance of IT policies and processes to the ERMF (including related policies) and industry best practice, rules and regulations; conduct IT risk and controls
monitoring reviews (including projects and new products, report observations to management and relevant governance structures, provide recommendations on required remedial actions, and monitor
implementation thereof.
Duties & Responsibilities
- Review and evaluation of IT strategies and alignment with business plan and strategic initiatives.
- Risk oversight of strategic initiatives particularly in relation to strategic partnerships with Fintech
- companies or outsourcing arrangements with IT vendors.
- Provide assurance that IT Division applies the organisation’s approved risk management frameworks as it
- relates to technology and information systems.
- Facilitate effective business continuity and disaster recovery planning and testing.
- Provide oversight and challenge on the identification, assessment, monitoring, mitigation and reporting of
- IT, and Cybersecurity related risks within the organisation.
- Monitor adherence to Programme Governance and System Development Life cycle standards for
- Business and strategic initiatives with technology as key enabler.
- Monitor the organisation’s Cybersecurity risk and control environment and highlight any unmitigated risk
- exposures.
- Review and provide advice on efforts to create/ uphold IT risk management and Compliance and initiatives to preserve IT security throughout the bank.
- Effectively communicate IT compliance standards to IT department and relevant business areas.
- Drive IT Risk awareness training programs
- Liaise with the Compliance department to keep abreast of and communicate IT regulatory requirements
- IT and relevant Business Units, as well as review action plans to assess compliance thereto.
- Provide accurate reports and discuss results with key stakeholders and provide appropriate recommendations or conclusions.
- Provide ongoing feedback and reports on the bank’s IT risk profile and management thereof.
- Keep abreast of and manage IT Risk expectations from internal and external stakeholders.
- Manage own performance throughout the year.
- Invest in personal development.