Technology Risk Manager at Discovery Limited

Job Purpose 

• The Technology Risk Manager is responsible for developing, implementing, and maintaining the organisation’s Technology Risk Management Framework. The role will provide oversight, advice and assistance to the business in the identification, evaluation, assessment and treatment of information and technology related risks, to improve risk awareness and risk culture through challenging first-line management’s information and technology risk management practices.

This position reports to the Head of Technology / Data Risk.

Areas of responsibility may include but are not limited to 

Technology Risk Framework & Governance

• Implement and enhance the Technology Risk Management Framework.
• Maintain IT governance standards, policies, and procedures.

Technology Risk Identification, Assessment & Monitoring

• Conduct technology and cybersecurity risk assessments.
• Maintain a comprehensive IT risk register.

Technology Governance Committees & Reporting

• Produce clear, concise, and decision-focused risk reporting for senior management, risk committees, and executive forums.

Emerging Technology, Data, and AI Risk

• Assess technology risks associated with emerging technologies, including AI, advanced analytics, data science, and automation initiatives.

Collaboration & Stakeholder Engagement

• Work with IT, Cybersecurity, Data, and business units to embed technology risk.
• Regulatory Compliance & Technology Standards
• Ensure compliance with relevant technology and cybersecurity regulations.
• Facilitate the escalation of risk and control issues requiring visibility by providing a cohesive and comprehensive view of assurance across the risk environment.
• Continuous monitoring of levels of IT risks across the business by tracking implementation of management action plans to mitigate or address identified risk, and issues as well as audit findings raised.
• Develop effective ways of working in partnership with key functions within the risk Business Unit and across other Business Units to ensure a consistent holistic approach to assurance and early communication of emerging issues.
• Prepare clear, concise risk reports, presentations, risk information and investigations for senior management, risk committees, and executive forums.
• Use the risk management tool as an enabling technology, including automated risk monitoring and reporting
• Providing independent oversight and advice on information and technology-related risks.
• Challenging and improving first-line management’s risk management practices.
• Identifying, evaluating, and assessing potential risks to our systems and data.
• Improving risk awareness and promoting a strong risk culture throughout the organization.

Personal Attributes and Skills 

• Proven experience in a Technology Risk and oversight capacity, such as IT Risk, IT Governance, IT Audit, or Information Security.
• A strong understanding of Cyber and IT Security best practices and principles.
• Experience with relevant risk methodologies and control frameworks like COBIT, ISO, NIST, and ITIL.
• Excellent analytical, communication, and interpersonal skills.
• Sound understanding of technology-enabled risk
• Identify, analyse and address risks appropriately in order to move the business forward
• A sound knowledge of the financial / retail banking industry, the mechanics of its operation and its trends. Familiarity with banking specific and other relevant legislation and regulations (e.g. Banks Act, Basel, TCF, POPI) is useful
• Communicate efficiently and effectively with the business at all levels
• Ability to work independently and meet deadlines
• Confidentiality and Integrity
• Structured analytical thinking and strong professional judgement
• Able to work at designated office or from home as and when required

Education and Experience 

• Bachelor’s degree in information systems / computer science / informatics / commerce /finance / audit
• A minimum of 5 years’ experience in Technology Risk, IT Audit, or Cybersecurity.
• Minimum 3 years’ financial services experience
• Professional Certifications advantageous - CRISC / CISA / CISM