Senior Risk Manager: Data Risk at Nedbank

Job Purpose

• To lead the Data Risk (including privacy risk) mandate for PPB by embedding and operationalising relevant Group Risk frameworks and ensuring effective governance over all data‑related risks.
• The role provides expert oversight across the data lifecycle, ensuring regulatory compliance, identifying emerging risks and partnering with business and technical teams to strengthen PPB’s data risk posture.

Job Responsibilities

Core Risk Management

• Embed and operationalise the Group Risk, Data Risk, Cyber Security Risk and Privacy Frameworks across PPB by integrating risk standards into business processes and governance routines.
• Identify, assess, document and monitor data‑related risks across business units, ensuring appropriate controls, mitigation plans and remediation timelines are established.
• Lead investigations into data breaches, privacy incidents, compliance findings and other data‑related risk events, including root‑cause analysis and tracking of corrective actions.
• Maintain and oversee the PPB Data Risk Register, ensuring all risks, controls and remediation items are accurately recorded, monitored and updated.
• Analyse complex data ecosystems — including data pipelines, engineering approaches, cloud environments and automation tools — to identify vulnerabilities and emerging risks.
• Prepare, facilitate and present comprehensive data and privacy risk reporting at senior governance committees such as EXCO, ERCO, BUCC and OPCOM.

Data & Privacy Expertise

• Provide specialised expertise on data engineering concepts such as SQL, ETL processes, data warehousing, data modelling and end‑to‑end data lifecycle management.
• Challenge technical decisions and proposed solutions from operational and data engineering teams to ensure data integrity, privacy and risk considerations are fully addressed.
• Collaborate with CIA, Data Management Officers, privacy teams and business units to ensure compliance with regulatory requirements including POPIA, GDPR and internal data governance policies.
• Monitor and assess emerging data risks, regulatory updates, industry trends and technology changes that may impact PPB’s risk posture.
• Support AI‑related risk assessments, model validation processes, and governance relating to machine learning, automated decisioning and algorithmic transparency.

Stakeholder Engagement

• Build and maintain strong partnerships with CIA Data teams, Data Management Officers, Internal Audit, Group Risk and PPB Executives to align on data and privacy risk expectations.
• Engage with cross‑functional teams to provide expert advice, influence risk decisions and support implementation of effective data‑related controls.
• Drive data and privacy risk awareness through targeted communication, training initiatives and capability‑building efforts across PPB.

Leadership & Culture

• Operate as a senior specialist who provides independent thought leadership, strategic insight and strong decision‑making within the data and privacy risk domain.
• Contribute to a culture of accountability, compliance, transformation and continuous improvement through proactive risk engagement and professional excellence.
• Promote collaboration, shared learning and professional curiosity across the risk ecosystem by guiding peers and supporting cluster‑wide risk initiatives.

Essential Qualifications - NQF Level

• Advanced Diplomas/National 1st Degrees

Preferred Qualification

• Bachelor’s degree in Information Technology, Data Science, Engineering, Computer Science, Risk Management or a related field.

Preferred Certifications

• CRISC
• CISM
• Data Governance Certifications (DAMA, DCAM etc.)

Minimum Experience Level

• 4+ years of hands‑on experience in data‑related roles, including work in data engineering, data management, analytics, or data governance.
• Practical exposure to SQL, ETL processes, data pipelines, data warehousing, or data modelling, demonstrating an ability to understand data structures and technical environments.
• Experience working within complex data ecosystems and contributing to data quality, data controls, or data‑related processes.

Preferred Experience

• 5+ years’ experience in data and privacy risk, digital risk, technology assurance, or internal audit with a focus on data‑driven or technology‑driven environments.
• Experience conducting risk assessments, control evaluations, or data/privacy audits, particularly in regulated environments.
• Strong working knowledge of POPIA, GDPR, and formal data governance frameworks.
• Exposure to emerging technologies such as AI, machine learning, automated decisioning or model governance.
• Experience engaging senior stakeholders and presenting in governance forums such as EXCO, ERCO, BUCC, or OPCOM.

Technical / Professional Knowledge

• Banking knowledge
• Business Acumen
• Data analysis
• Governance, Risk and Controls
• Industry trends
• Principles of project management
• Relevant regulatory knowledge
• Business writing skills

Closing date: 29 January 2025