IT Risk Manager - Randburg at FirstRand Group

Job Description

To provide specialist advice and guidance to the IT Risk Community and the to ensure appropriate development and implementation of an IT risk management programme to support the business in achieving its strategies in accordance with FNB governance and IT Risk requirements

• Report on IT Risk related losses in line with operational risk requirements
• Embed a culture of consciousness and transparency for risk management and ensure the nature and size of IT risks is well understood and owned at the right levels in the business.
• Cultivate and manage objective working relationships with Segment IT
• Risk representatives, CROs, CIOs, and Security officers while maintaining his/her independence.
• Maintenance of expert knowledge on relevant legislative amendments, industry best practices and provision of proactive advice and solutions to relevant stakeholders
• Provide guidance to the segments in interpreting, adapting and driving implementation of the FRG/FNB IT risk framework to align to business specific requirements
• Provide advice and support to segments to ensure that IT Risk governance is fully functional and in accordance with FNB governance (IT, business) and Risk requirements.
• Provide specialist input and support in the development and implementation of FNB wide IT risk strategy and plan taking into consideration key IT risks and issues prevalent across the business. This includes continuous assessment of IT risk issues to identify trends requiring FNB wide solutions
• Monitor, identify and communicate external new and emerging IT risk/threats and testing adequacy of existing controls in relation to this and recommending actions for improvement
• Regular review of key technology process to determine compliance and control gaps, including facilitation of root cause analysis to identify trends and appropriate solutions
• Provide guidance and support in the implementation of process based IT risk and control assessments in business
• Lead or Partner with Business and IT in assessment IT risks for key/assigned IT risk projects including mitigation and resolution strategies
• Advice and provide support to business in putting plans in place to mitigate identified IT risks and issues as well as to improve identified control weaknesses in a cost effective and practical manner.
• Continuous monitoring of levels of IT risks across the business by tracking implementation of management action plans to mitigate or address identified risk, and issues as well as audit findings raised.
• End to end management of the reporting process and consolidation for regular internal and periodic statutory reporting to communicate an accurate and complete view of the IT risk profile and in a manner that guides actionable management decisions.
• Provide IT risk services in line with business expectations
• Manage the conceptualisation, planning, and delivery of  IT Risk
• Management projects as assigned
• Drive capability development/capacity building of stakeholders in area of specialisation (IT risk methods, tools and frameworks)