Senior Risk Analyst - RMCD at South African Reserve Bank

Brief description

The main purpose of this position is to assist in the provision of risk management services and the delivery of strategic initiatives within the Integrated Risk Management Division of the Risk Management and Compliance Department (RMCD) at the South African Reserve Bank (SARB).

Detailed description

The successful candidate will be responsible for the following key performance areas:

• Assist with the ongoing development and implementation of formalised risk management processes in the SARB.
• Facilitate strategic risk assessments and review operational risk and control self-assessments by clients.
• Facilitate information technology (IT) application and general IT risk assessments to enable clients to proactively manage risks relating to technology.
• Compile and update risk profiles based on the outcomes of risk assessments in the SARB.
• Assist in the implementation and continuous enhancement of RMCD IT systems.
• Review the risk management database to ensure the integrity of data.
• Administer the risk mitigation action plan follow-up process.
• Prepare reports to the departments and risk oversight committees.
• Conduct ongoing research into risk management best practices and the future role of risk management.
• Manage the performance and career development of the risk analysts within the Integrated Risk Management Division.
• Provide training and support to clients relating to risk management policy, methodologies, processes and software.
• Build and manage relations with clients and other stakeholders.
• Collaborate with other internal and external stakeholders to provide data, insights and analytical expertise on risk and controls across the SARB Group.
• Implement action plans to address identified departmental IT risk exposures as per timelines provided (audit findings and risk assessments).

QUALIFICATIONS

Job Requirements

To be considered for this position, candidates must be in possession of:

• an Honour’s degree or an equivalent qualification, with Risk Management, Auditing and IT as major subjects;
• at least eight to 10 years’ relevant and practical experience in the IT risk management, IT auditing and/or IT field, with at least two years in a team leader/supervisory role.

The following would be an added advantage:

• a Master degree in IT, Risk Management and Auditing;
• a Certified Information Systems Auditor (CISA) and/or Certified in Risk and Information Systems Control® (CRISC®) certification;
• IT risk management experience in a financial environment; and/or
• experience in the use of the risk management computersoftware application.

Requirements related to knowledge, skills and attributes include:

• sound knowledge of risk management frameworks, processes, standards and practice;
• thorough knowledge of the ISO 31000 Risk Management Framework;
• thorough knowledge of IT general and application controls;
• experience in the use of relevant risk management computer software applications;
• good working knowledge of the Microsoft (MS) Office suite (e.g. MS Word, Excel and PowerPoint);
• proven facilitation and presentation skills;
• strong leadership and management skills;
• excellent interpersonal and communication skills(verbal and written),including report-writing;
• stakeholder engagement and management skills; 
• proven scribing or minute-taking skills;
• the ability to function independently (being a ‘self-starter’);
• the ability to conduct research, analysis and benchmarking;
• attention to detail;
• good time management skills;
• flexibility to initiate or adopt new ways of working, adapting approaches as appropriate to changing business requirements;
• the ability to multitask and prioritise tasks; and 
• delivery orientated.