Job Vacancies at South African Reserve Bank

Detailed description

• Develop the Departmental (Spoke) integrated risk management, project risk management, compliance, ethics and business continuity management implementation/work plan in collaboration and alignment with RMCD (the Hub).
• Facilitate regular operational, project, compliance and ethics risk assessments as well as business impact analysis and business continuity planning update and review sessions in compliance with the RMCD policies and frameworks.
• Support the Hub in SRA planning, scheduling and execution.
• Champion the SARB ethics policy, serve as the first point of contact and provide advisory service to embed ethical behaviour.
• Develop Spoke emerging risk profile by continuously scanning the external environment to identify emerging risks within the Spoke and to facilitate scenario analysis for the department. 
• Identify changes in the applicable methodologies/legislation/regulations and local/international standards relating to the Spoke’s area of accountability.
• Implement the RMCD reporting frameworks and templates for Spoke management and governing forums’ approval.
• Track progress on the implementation of the department’s strategic, operational,  project, compliance and BCM risk response strategies and include in reports to Spoke Management and the Hub.
• Conduct and report quality assurance reviews for RMCD requirements covering integrated risk management, project risk management, compliance, ethics, and business continuity quality reviews. 
• Identify training needs for all integrated risk management, project risk management, compliance, ethics and business continuity management and facilitate on-the-job training and awareness sessions for new employees.
• Create risk, compliance and specialised risk (cyber, physical and data privacy) awareness within the department through campaigns and appropriate media.
• Develop and implement awareness and training plans for all risk disciplines.
• Act as the central point of contact between business, the RMCD and cyber and physical security risk as well as communication and dissemination of risk related information.
• Provide reports on risk and compliance related information to RMCD, business and cyber and physical security as well as report any changes to the risk profile.

Qualifications

• A Bachelor’s Degree (Compliance Management/Finance/Risk, Audit) (NQF 7) OR equivalent
• A minimum of 5-8 years of experience in a Risk, Compliance, Audit facilitation environment OR related
• Accreditation with BCI
• ISO22301 certification
• Ethics Certification

go to method of application »

Detailed description

The successful candidate will be responsible for the following key performance areas:

• Research and recommend emerging and fit-for-purpose network security solutions and participate in the procurement of such solutions aligned to the business strategy.
• Define and evolve the SARB Group network security architecture in alignment with the to-be architecture.
• Plan and develop network security architecture blueprints and roadmaps for network security solutions in alignment with industry best practices and standards.
• Oversee the implementation of network security designs to ensure alignment with defined architecture.
• Provide expert guidance on network security architectures and optimisation.
• Oversee the management of the network security life cycle.
• Lead the design of infrastructure solutions to ensure alignment with defined architecture.
• Implement and maintain the governance and security model for network security as developed by the Cyber and Information Security Unit.
• Develop, maintain and document technical standards, procedures, user guides, standard operating procedures (SOPs), instructional documents and so forth relating to the network security solutions.
• Collaborate and engage with internal and external stakeholders to ensure the functionality of the deployed network security solutions and technologies.
• Identify, address and remediate risks in the network security environment as identified by auditors and governance-related assessments.
• Stay abreast of new developments in network security architectures and technologies.
• Provide architectural expertise in information and communications technology (ICT) network security projects and participate in other SARB Group projects to contribute towards business objectives.
• Take responsibility for network security planning for disaster recovery and resource allocation to ensure optimal performance, continuity and scalability.

Qualifications

Job requirements

To be considered for this position, candidates must be in possession of:

• a minimum of a Postgraduate Diploma / Honours degree (NQF 8) in IT, computer science or an equivalent qualification;
• TOGAF certified;
• CISCO Network Security certification;
• Certified Information Systems Security Professional (CISSP) certification will be an added advantage;
• ITIL v3/4 and COBIT 2019 will be an added advantage;
• a minimum of 8–10 years’ experience in network security architecture with a strong track record of designing and implementing network security solutions in enterprise organisations.

Additional requirements include:

knowledge and skill in:

• industry, organisational and business awareness;
• quality assurance; and
• continued learning and/or professional development;
• excellent technical knowledge of infrastructure services;
• continuous improvement of infrastructure services;
• comprehensive hands-on infrastructure services troubleshooting experience;
• ability to read and understand technical manuals, procedural documentation and original equipment manufacturer (OEM) guides; and
• liaising with external services providers for purposes of product and technology review and coordinating vendor presentations where relevant.

go to method of application »

Detailed description

The successful candidate will be responsible for the following key performance areas:

• Manage the daily operations and activities of the SARB IT Service Desk to ensure that all IT service requests and incidents are addressed in a timely and efficient manner to maintain an exceptional customer service record.
• Develop and drive the implementation of standard operating procedures (SOPs) for the IT Service Desk.
• Develop and manage the implementation of process improvement plans.
• Take responsibility for the IT Service Desk data analytics, reporting and procedure documentation.
• Monitor, measure and enforce governance and compliance to IT service standards.
• Drive the employee self-service and overall automation agenda as part of the continuous improvement in the IT Service Desk environment.
• Build and manage key external and internal stakeholder relationships to ensure the delivery of quality service.
• Participate in broader departmental/divisional projects to contribute towards the SARB’s business objectives.
• Manage the performance of the third-party service provider in line with the business requirements and service standards.
• Monitor and control the quality of the services provided by contractors as well as provide coaching where necessary.
• Manage the training and development of the IT Service Desk team.
• Provide input to resource planning, cost estimation, budget development and cost control.

Qualifications

Job requirements

To be considered for this position, candidates must be in possession of:

• a minimum of a Bachelor’s degree (NQF 7) in computer science, information systems or an equivalent qualification;
• ITIL Foundation certification in IT service management; and
• a minimum of 5–8 years’ experience in an IT environment.

Additional requirements include:

knowledge and skill in:

• industry, organisational and business awareness; 
• quality assurance;
• continuous improvement;
• continued learning and/or professional development;
• IT enablement planning; and
• service management;

skills in:

• infrastructure support;
• operations; and
• IT reporting; and
• management of third-party service providers.

go to method of application »

Detailed description

The successful candidate will be responsible for the following key performance areas:

• Provide managerial leadership and strategic direction, including managing the day-to-day operations of the skills development, career management facilitation, training provisioning, curriculum development and quality assurance functions in the SARB Group.
• Manage the resources (human, financial and capital) of GSMD’s learning and development … to achieve the strategic objectives set by GSMD.
• Fulfil the team leadership function pertaining to on-the-job training development and performance of the team.
• Create a framework of policies and procedures for skills development, training provisioning, curriculum development and quality assurance, and ensure implementation thereof and adherence thereto.
• Develop, implement and execute skills development processes and learning provisioning plans for security operations across the SARB Group.
• Monitor the implementation of developed curricula on an ongoing basis.
• Evaluate the impact of learning and development interventions to assess whether organisational and legislative objectives were met.
• Collate, analyse and escalate management information to the Divisional Head for planning and decision-making purposes.
• Keep abreast of industry practices in order to provide informed and up-to-date guidance regarding security-related learning provisioning, curriculum development and quality assurance.

Qualifications

Job requirements

To be considered for this position, candidates must be in possession of:

• at least an Honours degree (NQF level 8) in Human Resources Development or an Occupationally Directed Education, Training and Development Practices (ODETDP) qualification, or an equivalent qualification; and
• at least 8–10 years’ experience in a security-related training environment, with specific emphasis on skills development, training provisioning, curriculum development and quality assurance, of which at least 2–3 years should have been in management.

Additional requirements include:

demonstrated knowledge of and experience in:

• financial management;
• quality assurance;
• continued learning and/or professional development;
• outcomes-based training and quality assurance;
• quality frameworks for NQF-accredited training; 
• curriculum development processes; and
• skills planning and development.

go to method of application »

Detailed description

The successful candidate will be responsible for the following key performance areas:

• Proactively manage and coordinate travel logistics for the divisional management team.
• Plan, coordinate workshops, events and divisional activities, ensuring professional execution and effective follow-through on agreed actions.
• Prepare and edit correspondence, reports, communications, presentations and other documents, conducting basic research and analysis where necessary.
• Coordinate and monitor divisional strategic initiatives and projects by supporting planning, reporting, governance compliance, stakeholder engagement and the tracking of deliverables to facilitate successful
• execution and decision-making.
• Coordinate activities across internal and external stakeholders to ensure alignment, effective communication and timely delivery of agreed outcomes.
• Maintain accurate records and reporting of project and operational information, providing timely updates and supporting informed decision making.
• Maintain effective internal and external relationships on behalf of divisional management, engaging with members and stakeholders at all levels of seniority.
• Monitor and coordinate invoice processing and payment activities, liaising with vendors and internal stakeholders to ensure accuracy, compliance and timely settlement.
• Execute additional project and administration related tasks as required by the divisional management team.
• Continuously enhance administrative and project support practices by identifying, recommending and implementing process improvements and best practices where appropriate. 

Qualifications

Job requirements

To be considered for this position, candidates must be in possession of:

• A minimum of a National Diploma in either office administration or project management (NQF 6)
• A minimum of three to five years’ experience in corporate office administration or project administration environment
• Experience in supporting management, coordinating and managing administrative processes.

Additional requirements include:

• Verbal and written communication
• Planning and organising
• Interpersonal skills
• Attention to detail
• Resilience
• Problem solving
• Judgment and Decision making
• Drive for results
• Teamwork
• Multitasking
• Stakeholder and client focus
• Writing and reporting

go to method of application »

Detailed description

The successful candidate will be responsible for the following key performance areas:

• Supervisory oversight of designated banks, banking groups, banking subsidiaries and branches of designated banks (collectively referred to as ‘banks’).
• Assess and analyse the strategies and business models of banks.
• Analyse and assess the business portfolios of banks.
• Analyse and form a supervisory view of the risks facing banks and the impact thereof on their risk profiles.
• Analyse and assess the adequacy and appropriateness of business and risk management practices applied by banks and the alignment thereof with industry best practices.
• Analyse and assess the evolving economic and operating environment and the impact thereof on banks’ risk profiles.
• Identify and monitor emerging risks and the potential impact thereof on the banking sector and individual banks, in particular.
• Develop and apply analytical methods to analyse and interpret risk-based regulatory data submissions.
• Assess compliance with the Banks Act 94 of 1990, the Regulations relating to Banks, Financial Sector Regulation Act and other relevant legislation.
• Prepare detailed reports based on the outcome of analysis performed.
• Plan, arrange, prepare for, and conduct on-site reviews and prudential meetings with banks’ management, executives, boards and board sub-committees.
• Prepare detailed formal feedback to banks following on-site reviews and prudential meetings held with banks’ management, executives, boards and board subcommittees.
• Present the outcome of ongoing analysis and supervisory assessments to senior management of the Prudential Authority and representatives of banks.
• Maintain permanent electronic records in respect of banks.
• Manage correspondence pertaining to banks.
• Undertake ad hoc projects as assigned by management.
• Perform duties as a relationship manager by, among other things, undertaking frequent, often high-level liaison with banks and other interest groups, such as the external auditors of banks.

Qualifications

Job requirements

To be considered for this position, candidates must be in possession of:

•  a post graduate degree in Accounting, Banking, Economics, Finance, Risk Management, BCom (Law) or a relevant equivalent qualification; and
• two to five years relevant working experience in regulatory environment or financial sector. 

Additional requirements include:

• problem-solving and analytical skills;
• financial and business acumen;
• attention to detail;
• excellent verbal and written communication skills;
• ability to effectively and efficiently manage time;
• proven ability to influence, build and maintain relationships;
• good working knowledge of the Microsoft Office suite (Word, Excel and PowerPoint) and other related software packages;
• conversant with the Banks Act 94 of 1990, Financial Sector Regulation Act 9 of 2017 and related Standards and Regulations;
• knowledge and understanding of the Basel Committee on Banking Supervision’s Core Principles for Effective Banking Supervision;
• knowledge and understanding of the Basel Committee on Banking Supervision’s supervisory framework;
• knowledge of prudential supervision and the supervisory framework applied in South Africa;
• knowledge of basic risk management standards and practices applied by banks and banking groups;
• an understanding of key issues and risks facing banks and banking groups;
• an in-depth knowledge of the business of banks;
• an understanding of the business models applied by, and the financial and operating environment of banks; and
• knowledge and understanding of corporate governance and risk management best practices and standards.

go to method of application »

Job Description

The successful candidate will be responsible for the following key performance areas:

• Contribute to the development and execution of the department and NPS strategy (e.g.  NPS Vision).
• Draft, issue and/or amend policy and regulatory documents (e.g. standards, directives, policy papers, consultation papers, explanatory memos, notices and guidance notes). 
• Review and provide input to other legislation, standards and reports derived from international standard setting bodies, regional and domestic regulatory authorities.
• Review and approve the entry, participation and exit criteria of operators and schemes including amendments
• Provide input into the requests from operators of payment, clearing, or settlement system to operate in another jurisdiction and provide recommendations .
• Review internal and external comments received from stakeholders on policy and regulatory instruments. 
• Contribute to the process of developing Anti-Money Laundering (AML)/ Combating the Financing of Terrorism (CFT) and Combating the Financing of Proliferation (CFP) strategy, policies and regulatory framework.
• Coordinate and administer policy and regulation dialogues and to assist in the establishment and operationalisation of necessary committees .
• Monitor and identify payments policy, regulatory and legislative developments, both internationally and domestically 
• Provide input to NPS and other relevant policy, regulatory, licensing, supervisory and oversight frameworks.
• Conduct research to keep abreast of policy, regulatory and risk-reduction developments and best practices.
• Ensure that the NPS regulatory framework complies with relevant international standards and practices.
• Provide guidance and input in new products, innovation and developments in the NPS. 
• Build relationships and engage with internal and external stakeholders.
• Draft surveys in order to obtain inputs and feedback from stakeholders on payments policy and regulatory matters and consolidate inputs received.
• Generate and share knowledge with internal and external stakeholders and contribute to training, capacity building and education of stakeholders, including consumers.
• Represent the Bank and PRD and contribute in industry and stakeholder meetings, and/or on international, domestic, regional and standard setting bodies, committees, structures, forums etc. 
• Collect and analyse data impacting the policy and regulatory environment and the development of policy and regulations
• Assist with identifying, assessing and mitigating risks within the Policy and Regulation division. 
• Contribute to projects and attend to ad hoc tasks and responsibilities as per requirements.

Qualifications

To be considered for this position, candidates must be in possession of:

• the minimum of an Honours degree (NQF 8) in Accounting, Commerce, Economics, Finance or Law, or an equivalent qualification; and
• the minimum of 5- 8 years’ experience in the payments or financial markets environment.

Additional requirements include:

• industry, organisational and business awareness;

knowledge and skill in:

•  licensing, authorisations, designations and registrations; 
• the NPS;
• the NPS legal framework and regulations, particularly the South African Reserve Bank Act National Payment System Act 78 of 1998 and directives issued thereunder, and other relevant legislation such as the Financial Sector Regulation Act, the Financial Intelligence Centre Act 38 of 2001;
• industry, business and organisations; 
• quality assurance; 
• continuous improvement;
• continued learning/professional development; 
• risk management;
• central banking; and
• digital literacy;

the ability to:

• problem-solve and analyse;
• drive results;
• promote teamwork;
• communicate effectively;
• build and maintain relationships;
• have impact and influence;
• have a service and stakeholder focus;
• plan and organise;
• manage complexity and ambiguity; and
• display innovation and creativity.

go to method of application »

Detailed description

The successful candidate will be responsible for the following key performance areas:

• Lead the discovery, design and evolution of centrally provisioned payment products that address validated market, participant and end-user needs.
• Define clear product value propositions, target users, service outcomes and market positioning in collaboration with business, policy, regulatory, technology, architecture and delivery teams.
• Direct customer, market and global payments research, and translate insights into evidence-based product strategies and investment priorities.
• Own the prioritised, outcome-based product roadmaps aligned with the PEM Programme roadmap, enterprise architecture and approved policy objectives.
• Translate applicable policy, legal and regulatory requirements into product principles, requirements and implementation guardrails, in partnership with the relevant accountable functions.
• Identify, assess and prioritise opportunities for new or enhanced payment products, supported by clear business cases, benefits, dependencies and risk considerations.
• Lead structured co-creation and consultation with payment system participants, public sector stakeholders and other industry counterparts to support product adoption and implementation readiness.
• Direct the development of sustainable product funding, pricing, costing and cost recovery models, taking account of public interest, accessibility and adoption objectives.
• Establish the product management operating model, governance, decision rights, standards and capabilities required for a centralised payment product function.
• Develop a comprehensive centralised payment product vision and strategy.
• Lead multidisciplinary product teams across the full product life cycle, from discovery and validation through delivery and adoption to performance management, continuous improvement and retirement.

Qualifications

Job requirements

To be considered for this position, candidates must be in possession of:

• at least a Master’s degree (NQF level 9) in Banking, Economics or Finance, or an equivalent qualification; and
• at least 10 to 12 years’ experience in an economics or financial environment, part of which should be in a senior management position.

Additional requirements include:

• proven strategic leadership;
• the ability to influence at executive and industry level;
• demonstrated capability to build, lead and develop high-performing multidisciplinary product teams;
• experience in leading large, complex programmes, projects or business functions;
• sound knowledge of the national payment system, payment infrastructure, governance, risk management, competition considerations and regulatory frameworks;
• excellent stakeholder engagement, negotiation and relationship management skills;
• strong financial and business acumen, including budget management; 
• the ability to operate effectively in a dynamic and ever-evolving environment;
• a proven track record of driving organisational change, innovation and continuous improvement; and 
• exceptional communication, presentation and report-writing skills.

go to method of application »

Detailed description

The successful candidate will be responsible for the following key performance areas:

• Consult stakeholders to understand the expected outputs of applications and software, identify appropriate security controls and achieve an optimal balance between security, functionality and performance.
• Incorporate the identified security controls into technical specifications and documentation to ensure secure deployment, as agreed with stakeholders.
• Develop test plans and design appropriate security software tests to adequately secure applications and software.
• Perform security testing in accordance with agreed and approved test plans, using SARB Group-approved tools, to ensure that security controls meet requirements and align with security standards at each stage of the project development life cycle.
• Collate, document, analyse and report security testing results to identify secure-coding vulnerabilities and application security configuration errors.
• Use vulnerability assessment reports to validate the secure deployment of applications and software within the SARB Group environment, including networks and operating systems.
• Participate in application security audits by providing relevant information and responding to and addressing security-related audit findings, thereby reducing the SARB’s threat landscape and improving its application security posture.
• Keep abreast of cybersecurity technologies, developments and practices.

Qualifications

Job requirements

To be considered for this position, candidates must have:

• a National Diploma (NQF 6) in information technology or an equivalent qualification in a related field;
• three to five years’ relevant experience in a cybersecurity operations environment, with a focus on designing and implementing manual and automated security software tests and maintaining the relevant technologies; and 
• relevant intermediate cybersecurity certifications, such as CompTIA CySA+, Certified Application Security Engineer (CASE) and technology-specific certifications will be advantageous.

Additional requirements include:

knowledge and skills in:

• industry, organisational and business awareness;
• quality assurance;
• continuous improvement;
• continuous learning and professional development;
• DevSecOps practices and tools for integrating security into CI/CD pipelines;
• the design, development and implementation of security software tests; 
• automated testing tools; 
• systems and networking; 
• application and software testing processes; 
• operations; and
• the secure software development life cycle (SSDLC).

go to method of application »

Detailed description

The successful candidate will be responsible for, among other duties, the following key performance areas:

• Finalise foreign loan applications and related correspondence, including the review and resolution of change requests submitted by Authorised Dealers.
• Validate foreign loan information recorded on the FLS and ensure completeness, accuracy and integrity of loan records.
• Administer and maintain the FLS, including user registrations, access requests, interest rates, system parameters and allocation of work items.
• Monitor inward foreign loan transactions for compliance with exchange control regulations and analyse loans for anomalies or potential irregularities.
• Compile weekly and monthly foreign loan statistics, management reports and ad hoc information requests for the department’s management and stakeholders.
• Provide guidance to internal divisions, Authorised Dealers, reporting entities, state-owned entities and National Treasury on foreign debt reporting requirements.
• Lead and guide junior team members in delivering work and executing tasks and provide input into the evaluation of their performance and development needs.
• Contribute to process improvement, knowledge sharing, data quality enhancement and regulatory compliance across reporting institutions. 
• Engage with internal and external stakeholders and deliver a coherent and convincing message.
• Stay abreast of developments in relevant standards, procedures and regulations, holding self, team members and stakeholders to account.

Qualifications
To be considered for this position, candidates must have:

• a bachelor’s degree in either commerce, informatics, statistics, economics, finance, accounting or information systems or an equivalent NQF 7-level qualification; 
• five to eight years’ experience in exchange control, regulatory reporting, financial surveillance, risk, compliance or data analysis; 
• knowledge of the Currency and Exchanges Manual for Authorised Dealers and exchange control regulations; and

Additional requirements include:

knowledge and skills in;

• industry, organisational and business awareness;
• quality assurance;
• continual improvement;
• risk management and compliance practices and standards;
• risk and compliance monitoring and reporting;

knowledge of:

• the operations manual;
• exchange control legislation, governance, risk and compliance;

skills in:

• verbal and written communication, including presentations and report-writing; 
• analysis and problem-solving;
• judgement and decision-making;
• planning and organising;
• a service and stakeholder focus;
• a drive for results;
• competence in workflow packages and Microsoft applications, including Excel, Word, PowerPoint and SharePoint; 
• the ability to work in and lead a team; and
• the ability to build and maintain professional relationships.

go to method of application »

Detailed description

The successful candidate will be responsible for the following key performance areas:

• Assess data governance and security maturity levels within the SARB Group against best practices.
• Develop standards, guidelines, processes and procedures for data governance and security within the SARB Group.
• Develop and promote data governance and security awareness across the organisation to ensure the appropriate use of business information.
• Contribute to the development of the SARB data strategy and monitor progress in its implementation.
• Define data governance, security measures and metrics to support reliable decision-making and appropriate data use.
• Monitor, measure and report on data stewardship levels to ensure the appropriate use of data.
• Enable the improvement of data governance and security capability by developing relevant stakeholders in all aspects of data governance and security.
• Play an oversight role in the remediation of data governance and security issues as well as in the development of a data security management plan.
• Develop and manage stakeholder relations effectively to promote data governance and security awareness across the organisation and support reliable decision-making and appropriate data use.

Qualifications

Job requirements

To be considered for this position, candidates must be in possession of:

• a Bachelor’s degree in Computer Science, Management Information Systems or Computer Engineering, or an equivalent qualification; and
• five to eight years’ experience in the field of data management.

The following would be an added advantage:

• a relevant data governance and security certification (e.g. CDMP Associate).

Additional requirements include:

knowledge and skill in:

• enterprise information management (EIM) strategy;
• EIM legislation and governance, risk and compliance;
• information governance;
• EIM reporting;
• industry, organisational and business awareness; and
• continued learning and/or professional development.

go to method of application »

Detailed description

The successful candidate will be responsible for the following key performance areas:

• Manage and monitor operational, preventative and corrective maintenance programmes.
• Maintain equipment and replacement programmes, including the documenting and inventory of all related systems.
• Manage the work of all HVAC contractors and service providers to ensure compliance with contractual agreements and budgetary restrictions. 
• Assist in vendor selection and soliciting bids for HVAC services. 
• Ensure that the design and maintenance of HVAC systems meet legislative as well as health and safety requirements. 
• Supervise the installation of HVAC systems, and specify maintenance and operating procedures.
• Negotiate and develop project contracts with external service providers. 
• Respond to emergency situations and provide assistance as directed. 
• Commission, organise and assess the work of contractors. 
• Manage and forecast expenditure, using full life-cycle costing techniques and ensure that work is completed within budget.  
• Perform other duties as assigned by the manager of operations.
• Manage the performance and development of staff in the HVAC subsection.

Job requirements

To be considered for this position, candidates must be in possession of:

• a National Trade Test in Refrigeration or Mechanical;
• NQF5 or N4 in Refrigeration qualification or equivalent technical qualification; and
• three to five years’ experience in a technical trade environment

Working experience in:

• the service maintenance of air-conditioning units, including fitment and layout;
• conversant in the dynamics of a high-rise and/or high-tech commercial office and building environment;
• maintaining electrical equipment and systems;

go to method of application »

Detailed description

The successful candidate will be responsible for the following key performance areas:

• Conduct security assessments, including code reviews, vulnerability scans and penetration testing, to identify and remediate security vulnerabilities.
• Collaborate with development teams to integrate security best practices into the system development life cycle, including threat modelling, secure coding and security testing.
• Design and implement application security controls, frameworks and policies to protect against emerging threats.
• Identify security risks and vulnerabilities, analyse their impact and engage relevant stakeholders, including governance bodies and product owners, on relevant security solutions, and drive and monitor their implementation to mitigate and remediate security vulnerabilities.
• Participate in application security audits through the provision of relevant information, respond to and address security-related audit findings to reduce the SARB’s threat landscape and improve its application security posture.
• Participate in information technology (IT) security projects as the application security subject matter expert, ensuring compliance with security standards during each stage of the project development life cycle.
• Engage with the larger security community to gain new knowledge and adopt new security capabilities within the SARB’s IT security environment.
• Participate in the evaluation and implementation of security tools and technologies, including static and dynamic code analysis, vulnerability scanning and confidentiality management.
• Stay abreast of the latest security trends, vulnerabilities and attack techniques, and proactively apply this knowledge to improve the SARB’s security practices. 
• Implement major security incident response procedures during a security breach by investigating, reporting and providing recommendations to ensure the continuous improvement of security measures and avoid recurrence.
• Develop training material and deliver application security training to all key stakeholders, including developers, testers and business analysts, in support of applications and integration security awareness campaigns.
• Present periodic reports and analytics pertaining to the security landscape surrounding the designated business applications.

Qualifications

Job requirements

To be considered for this position, candidates must have:

• a bachelor’s degree in IT (NQF 7) or an equivalent qualification;
• a Certified Applications Security Engineer qualification;
• a Certified Ethical Hacker qualification;
• at least five to eight years’ experience in system development life cycle frameworks and solutions, of which at least three years in overall security governance best practice, frameworks and design, with hands-on experience in security tools such as DAST, SAST and SCA; and
• any additional security certifications, for example Certified Information Systems Security Professional, Certified Secure Software Life Cycle Professional, Offensive Security Certified Professional or GIAC Web Application Penetration Tester, will be an advantage.

Additional requirements include:

knowledge and skills in;

• cybersecurity, governance, risk and compliance;
• industry, organisational and business awareness;
• quality assurance;
• continuous improvement;
• continual learning and professional development;
• collaboration;
• system development life cycle design, testing and development;
• application support and maintenance;

cloud platforms, such as AWS, Azure and Google Cloud, and their security features;

• scripting languages, including Bash and Python, and automation frameworks;
• network security, encryption and identity management;
• IT enablement reporting; and
• problem-solving and analytical abilities.

go to method of application »

The successful candidate will be responsible for the following key performance areas:

• Develop an end-to-end internal cross-functional programme controls framework comprising security, technology, financial, risk, data and information controls, on-site and off-site, internal and external to the SARB.
• Provide training and support to relevant stakeholders on the content of the framework as well as its use and application to facilitate compliance.
• Work closely with the SARB control functions, including the Internal Audit Department as well as the Risk Management and Compliance Department (RMCD), to ensure alignment and compliance with relevant policies and standards.
• Monitor compliance with the controls framework, identify any gaps and develop corrective actions in collaboration with relevant stakeholders.
• Identify, analyse and prioritise programme risks, and agree on and track the implementation of mitigating actions with relevant stakeholders.
• Collaborate with internal and external stakeholders to facilitate compliance and control at all levels of the programme.
• Actively stay abreast of and contribute to the development of best practices, methods and procedures relating to programme controls management.
• Lead the continuous improvement of the controls framework through collaboration with relevant stakeholders.
• Provide consolidated and integrated reports on programme controls information for management information and decision-making.
• Coordinate financial management, procurement and contracting activities to ensure alignment with programme controls processes and overall programme objectives.
• Oversee the integration between RMCD and other specialised risk areas.

Qualifications

Job requirements

To be considered for this position, candidates must be in possession of:

• at least a Bachelor’s degree (NQF level 7) in Commerce or an equivalent qualification;
• at least 5–8 years’ experience in a complex programme controls environment; and
• exposure to the project management environment, with a good understanding of contracts as well as risk and financial management in the SARB. 

The following would be an added advantage:

• a financial management qualification.

Additional knowledge and skills that would be beneficial include:

• industry, organisational and business awareness;
• quality assurance;
• continuous improvement;
• project management;
• project legislation as well as governance, risk and compliance; and
• project performance management.

go to method of application »

The successful candidate will be responsible for the following key performance areas:

• Direct and coordinate the activities of project resources to ensure the project progresses according to the approved schedule, produces the expected deliverables, remains within budget and meets specification and quality standards.
• Define the project scope and brief and develop the work breakdown structure in collaboration with key stakeholders to ensure a common understanding of deliverables and the approach.
• Produce comprehensive project management plans covering scope, quality, risk, time, cost, human resources, procurement, integration and communication, and ensure these knowledge areas are regularly updated and maintained.
• Ensure that all project documentation, deliverables and reports are produced, approved and maintained timeously.
• Identify and manage project risks, constraints and changes, ensuring that the project plan is managed and approved.
• Establish and manage relationships with stakeholders, role players and service providers to secure commitment to a common goal.
• Establish and effectively manage a multidisciplinary project team throughout the project life cycle, with clearly defined roles and responsibilities for delivering project outputs.

Qualifications

Job requirements

To be considered for this position, candidates must be in possession of:

• a relevant Bachelor’s degree in Commerce and/or Information and Communication Technology, or an equivalent qualification at NQF level 7;
• a minimum of five to eight years’ experience in project management within the payment environment; and
• sound knowledge of project management legislation, project cost management, and contract and service management.

The following would be an added advantage:

• a postgraduate qualification in Project Management;
• experience in managing projects leveraging both Waterfall and Agile methodologies.

Additional requirements include:

• facilitation skills;
• planning and organising skills;
• effective communication skills;
• a drive for results;
• service and stakeholder focus; and
• the ability to manage complexity and ambiguity.