IT Risk Manager

Vacancy Number
IRC242309
Position Title
IT Risk Manager
Organization Name
WB Operational Risk

About Us
WesBank, a division of FirstRand Bank Limited, is a leading Vehicle and Asset Finance bank and part of one of the largest financial services groups in Africa. WesBank has over 40 years experience in asset finance. We focus on providing secured instalment finance to retail, public sector and corporate markets, as well as related services such as insurance, fleet management and full maintenance rental. WesBank is the partner of choice for over 60 leading international brands in fields such as automotive original equipment manufacturers (OEMs), insurance providers and oil companies. We are a global company with successful operations throughout Africa as well as the UK.The Bank supports the recruitment and advancement of individuals with disabilities. In order for us to fulfill this purpose, candidates can disclose their disability information on a voluntary basis. The Bank will keep this information confidential unless we are required by law to disclose this information to other parties.
Role Purpose
To ensure the business risk management framework and IT standards are effectively applied to technology and information systems and to oversee business continuity, security and quality by ensuring the effectiveness of solutions and providing security-focused consultative services to the business.
Responsibilities

• Identify sources of the risk, areas of impact, events and their causes and potential consequences that might create, enhance, prevent, degrade, accelerate, or delay the achievement of IT objectives
• Determine the level of risk, which is defined as the combination of the consequences and likelihood of the inherent risk
• Conduct impact analysis to ensure resources are adequately protected with proper control measures within acceptable levels of residual risk
• Assist IT with creating action plans to mitigate potential risks within the IT environment and comply with governance in terms of legislative, audit and business policy requirements
• Follow up on deficiencies identified in monitoring reviews, self-assessments, automated assessments, and internal and external audits to ensure that appropriate remediation measures have been taken
• Contribute to IT Risk reports, and review and assess quality and accuracy of IT reports
• Monitor and analyse IT Risk performance and generate reports Identify areas needing improvement and develop recommendations
• Partner with business and IT about monitoring and reviewing risk performance
• Monitor and analyse IT Risk performance and generate reports. Identify areas needing improvement and develop recommendations
• Partner with business and IT with regard to monitoring and reviewing risk performance
• Provide advice and support to business about tools and methodologies to mitigate IT risks and issues, and to improve identified control weaknesses
• Consult with business and technical staff on potential operational impacts of proposed changes to the IT environment
• Inform stakeholders about IT risk issues and activities affecting the assigned area or project
• Report to management concerning residual risk Attend relevant BU committees e.g., Monthly BU IT Risk Committee, BU IT Exco, Project Steering committees, New Product Approval, CAB etc.
• Recommend and ensure implementation of required changes to IT risk and security policies and procedures
• Benchmark current IT practices against leading practices and existing frameworks
• Review and report any gaps in IT policies, procedures, standards both current and new Recommend required changes to IT policies, procedures, standards
• Implement, monitor and control business processes according to quality standards; policy; and compliance and governance requirements in area of accountability
• Ensure the development, alignment, mapping, and implementation of end-to-end processes aligned to the customer journey map
• Research, enable and consult on improvements and opportunities to harness technology and platform enablement
• Review existing processes and suggest innovative ideas to improve and streamline processes to drive efficiencies and minimise redundancy
• Monitor customer feedback reports and align processes to maximise efficiencies
• Assess, identify, and mitigate potential risks within the BU BCP, Crisis Management Response and DR processes and plans
• Cultivate a strong Risk Culture aligned to FSR Promises and manage objective working relationships with a variety of stakeholders, including peers, SME's, project managers and senior staff members by providing input to business requirements, including participation in Risk Hubs as part of RiskX

Qualifications and Experience

• Minimum qualification- Relevant Certification/Degree in Information Technology, Computer Science and/or IT Risk Management
• Preferred qualification- Relevant IT/Security certifications
• Experience- 5 to 8 years experience in a similar environment