Risk and Control Officer: Security Governance at Absa South Africa

Job Description

Security, Governance, Risk and Control

• Work collaboratively with Functions Tech Risk and Control officer, Project, Managed Service partners and technology teams to ensure solution design across the ERP Estate. Adheres to ABSA’s Security and GRC standards.
• Forge a collaborative partnership with managed services provider to ensure seamless conformity with SOX MSA procedures across the ERP Chapter. This encompasses guaranteeing the punctual fulfillment of attestations, proactive escalation when necessary, and diligent monitoring of control failure remediation to ensure timely risk mitigation within established timeframes
• Involvement during planning stage of all audits in the area.
• Review audit reports and factual accuracy of reports and that correct action owners were identified. Review the feasibility of agreed actions.
• Facilitate closure of audit findings.
• Ensure that Business and Managed Services Partner is educated about and understands the ERP Chapter Security and GRC processes
• Attend all ERP Chapter governance forums (Design Authority, Prioritizations, SLA and OLA reviews & CABs) and give expert input from a Security, Governance and Risk perspective.
• Be involved in project assurance reviews and ORIA's where required.
• Ensure solution design alignment to regulatory requirements and continuously update knowledge on regulatory requirements for the successful design of new and evolution of existing solutions
• Provide support and advise to project teams and Managed Services Partner. Guide and direct the team’s efforts to deliver on Authorisations and Security solutions
• Participate and positively contribute to various risk and governance forums

ERP Technology initiatives

• Proactively remain at the forefront of advancements in ERP chapter technologies
• Acquire additional skills in cross-functional areas and enabling technologies to be able to support technology initiatives within ERP Chapter such as proof of concepts, new technology investigations and set up
• Leverage a solid and deep understanding of the organization strategy to identify, design and deliver relevant, scalable, testable, re-usable technology solutions
• Utilize proficiency in analytical and innovative problem solving to integrate a solution framework (construct a solution from its elements) that extends beyond mere problem analysis.
• Lead design thinking processes to successfully deliver solution blueprints and associated roadmaps
• Harness a robust engineering foundation to make informed decisions in solution architecture – this expertise encompasses, amount other aspects: domain-driven design, loosely coupled integration, judicious employment of microservices, and other contemporary software design methodologies
• The above extends to identifying the best fit tools to be used for a particular solution, understanding those that would not be a good choice and leveraging researching skills to pivot towards something better
• Work with project / program management teams to design solution roadmaps aligned to the strategic requirements of an organiszation and through which the solution can be implemented across all phases of the initiative life-cycle (ideation through to product launch and commercialiszation)
• Work embedded, as part of a delivery team, to ensure the successful design and& implementation of technologies
• Ensures optimal use of Technology to maximisze benefits for customers, and ensure operation and support is optimal
• Initiates CBI (Continuous Business Improvement)
• Conducts TCO and ROI studies

Service Delivery

• Execute delivery of projects, enhancements and incident resolution through project delivery teams or a managed services partnership
• Assess vendor proposals for appropriateness and compliance with organiszation and industry standards. Review and sign-off all Vendor docs (Quotes, Specs, Manuals etc.)
• Support the implementation of service reviews and leverage review data to drive Service Improvement initiatives across the ERP Chapter
• Work embedded, as part of a delivery team, to ensure the successful design and implementation of solution blueprints from a Security and GRC perspective
• Review and provide quality assurance on Managed Service or Project delivered solutions.
• Proactively involve / engage Managed Service partners and technology teams in solution decision making, applying an enterprise-wide lens to solution development
• Support Business Unit objectives through collaboration and ongoing engagements and feedback between Tech, Managed Service Partnership and Business

People

• Participate in peer reviews (code, solution, testing etc.) and transfer knowledge and capability across delivery teams for improved solutioning & evolving architectural practices
• Set and cascade solution direction across technology delivery teams
• Build and evolve the architectural capability of Delivery teams across the business – through active coaching and information / knowledge sharing
• Build strong relationships and alignment with Absa’s risk and security teams

Skills and Experience

• Minimum 3 years' experience in a similar role
• Previous experience with Technology riks
• Relevant certification eg. CRIC, CISM etc.

Education

• Bachelor`s Degrees and Advanced Diplomas: Business, Commerce and Management Studies (Required)