Specialist: Information and Technology Risk at Capitec Bank

About the role:

• The role will provide independent oversight, advice and assistance to the business in the identification, evaluation, assessment and treatment of information and technology related risks. To improve risk awareness and risk culture through challenging first-line management’s information and technology risk management practices.

Experience
Minimum/Ideal:

• 3 years’ or more experience in Risk Management and/or Internal/ External Auditing. 
• Proven experience in a governance and oversight capacity, e.g. IT Governance, IT Audit or Information Security
• Proven experience and understanding of Cyber and IT Security best practice and principles.
• Performing risk and control assessments
• Experience in information risk management  and IT risk management, including information security

Qualifications (Minimum)

• Grade 12 National Certificate / Vocational

Qualifications (Ideal or Preferred)

• A relevant tertiary qualification in Risk and Compliance or Data Science

Knowledge
Minimum/Ideal:

• Understanding of IT/ Cyber Security and Cloud Computing
• Understanding of Data Management practices
• Knowledge of leading practices and regulatory requirements 
• General business acumen
• Applying/ Basic understanding of relevant risk methodologies and IT/ Cyber Security control frameworks, e.g. COBIT, ISF, ISO, NIST, ITIL, COSO, DAMA, DM-BOK