With over 100 years of rich history and strongly positioned as a local bank with regional and international expertise, a career with our family offers the opportunity to be part of this exciting growth journey, to reset our future and shape our destiny as a proudly African group.
Job Summary
To support the Chief Procurement Officer and develop a functional all encompassing Third-Party Risk capability, framework, strategy and operating model in a broadly defined group functional strategy; enabling horizontal implementation and adoption. Provide oversight on the standards, processes, and governance in the third-party resilience risks (e.g. Technology, Information Security and Cyber, Data and Records Management, Business Continuity Management and Change management domains). Ensure that all activities for the centre of excellence and duties assigned are carried out in full compliance with regulatory requirements, enterprise-wide risk management and governance management frameworks (and other applicable guidelines), internal policies and standards.
Ensure that all activities for the centre of competence and duties assigned are carried out in full compliance with regulatory requirements, enterprise-wide risk management and governance management frameworks (and other applicable guidelines), internal policies and standards
Job Description
- Ownership of the COE target operating model, and all incumbents related to it (i.e., COE engagement, change management, constitution)
- To be the functional leader and get results through complete functional synergy, building flexibility & effectiveness of the whole function, and collaborating with supporting areas to achieve the desired results
- Understand the relevant third party type value chain and leverage from all sub-functions and risk activities
- To be future-oriented through functional and industry best practice strategies and methodologies in getting "tomorrow's results" by addressing current issues
- Stay abreast of market, tools, methodology, practice changes and act as an advisor to guide business and the COE in managing the applicable risks exposures (R&D)
- Lead the support of Business Heads, Executives and Line Management with required governance, control, monitored reporting, in terms of the relevant risk types
- Manage other and self
- Understand business processes, business models, relevant value chains, its risk impact as well as key drivers associated.
- Develop and promotes a risk-smart workforce and environment.
- Deploy capacity and tools to be innovative while recognizing and respecting the need to be prudent in risk management
- Promote the protection of the Bank and its customers interest
- Supports an effective risk culture, where there is an open, proactive, and constructive dialogue in the management of the relevant risk types
- Enable the team and management to monitor the effectiveness of the control environment and to take action to prevent, mitigate and remediate the relevant risk types.
Leadership and Stakeholder Management
- Provide strong leadership (of others), by providing direction and displaying role model behaviors, inspiring others to work together to achieve the strategic vision
- Build effective working relationships with key stakeholders and information flows across the business units, risk functions and the various entities
- Advise leadership on emerging global third-party risk trends and advise accordingly
- Created and manage performance development (PD) plans and participate in the year-end feedback process
- Input into compensation structures, objectives, and performance management of employees where appropriate.
- Support and lead the organization in improving third-party risk management through digitization, automation, standardization, and simplification
- Deal with any escalations brought to their attention
- Be an advisor on risk decisions and escalate risk decisions to the relevant Head for attention
- Be involved in the oversight deep dive and lessons learnt exercises for material risks, including the review, challenges, and tracking/escalation of findings.
- Ensure that third-party processes, control requirements and governance frameworks that impact the relevant risk types are documented and understood by all members of the team.
- Enable the creation and maintenance of a central communication portal (knowledge base) for the COE to ensure knowledge content is up to date and relevant
- Define the SLAs that will speak to the target operating model
- Assess and verify the level of compliance for the relevant risk frameworks and policies adapted
- Maintain and review the funding of the COEs operations
- Provide a clear direction on the governance & reporting of the COE, as well as the strategic plan, and key focus areas.
- Provide a clear maturity model to measure the success and growth of the COE, as well as its capabilities
- Provide relevant coaching, guidance and training on the implementation and maintenance of the enterprise-wide relevant risk types and business components such as Critical Process Assessments (CPAs), Key Indicators (KIs), Events, Strategic Risk Assessments, and capital drivers.
- Manage, facilitate, and participate in the relevant working groups, committees, and combined assurance forums, in conjunction with the Department Heads
- Promote the sharing of information across the various business units and functions through working group collaborations and other means. (Change management)
- Educate business on the appropriate proactive remediation of any identified assessments and vulnerabilities.
- Establish an operating model and manage the relationship with the Business/ third party teams by acting as the primary point of contact, regarding day-to-day management of the services provided and issues experienced by the business and ensure that agreed standards are met, escalating issues where required
- Review and understand existing and new PPSGs (Procedures, Policies, Standards and Guidelines) and analyze for potential impact and incorporation.
- Provide input in the drafting of new PPSGs.
- Personal accountability
- Independent in practice and in thought
- Analytical: Able to understand business model, strategy, process, products and systems, and influence change.
- Confident to responsibly challenge data, facts, or trends
- Ability to manage conflicts
- Good interpersonal skills and ability to interact at all levels
- Leverages understanding of customers / consumers / suppliers / stakeholders to inform business decision
- Influential (Able to influence outcomes and strategy decisions at the highest level)
- Clear communicator, verbally and in writing
- B-degree or relevant qualification
- Management
- Minimum 4 Years relevant experience in one or more of the relevant risk type domains (Information Security & Cyber, Data & Records Management, Business Continuity Management, Third party Management)
- Any relevant IT resilience and third-party certification will be an advantage
- Data and Records Management
- Business Continuity
- Third party risk management
- Risk management
- Knowledge of cyber security governance and general security in computing
- Knowledge of banking environment
- Knowledge of the cyber risk environment
- Knowledge of computer networks and databases
- General knowledge of legal and ethical issues in information security
- General knowledge in Procurement and/or Vendor Management
- PmBOK, PRINCE II, CyBOK
- Cyber security frameworks (ISO27001, CIS controls, NIST)
- Applicable cyber security laws and regulations
- Proactive
- Relationship building and networking
- Persuading and influencing
- Presenting and communicating
- Applying expertise and technology
- Analysis
- Change agent
- Track record of delivery using structure methodology and tools
Bachelor`s Degrees and Advanced Diplomas: Business, Commerce and Management Studies (Required)
Absa Bank Limited is an equal opportunity, affirmative action employer. In compliance with the Employment Equity Act 55 of 1998, preference will be given to suitable candidates from designated groups whose appointments will contribute towards achievement of equitable demographic representation of our workforce profile and add to the diversity of the Bank.
Absa Bank Limited reserves the right not to make an appointment to the post as advertised
