I&t Risk Analyst - Bstd

Detailed description

The successful candidate will be responsible for the following key performance areas:

• Embed the SARB Group risk management frameworks, methodologies, processes, systems and related policies within BSTD.
• Embed the SARB's I&T risk management frameworks.
• Analyse and understand the business environment to support and guide the identification of risks and opportunities.
• Conduct I&T operational risk assessments in BSTD.
• Identify emerging risks in BSTD and report on them to BSTD management and the SARB's Risk Management and Compliance Department (RMCD).
• Consolidate, maintain and report on action plans recorded in the SARB Group's centralised risk incidents database.
• Identify and coordinate departmental risk management training needs and conduct related training.
• Assess and analyse risks related to IT applications and IT general controls to ensure IT risks are identified and managed.
• Embed and promote a positive and proactive risk management culture across BSTD.
• Facilitate sessions for the operational risk management assessments in BSTD in accordance with the SARB Group Risk Management Framework.
• Provide input into the overarching SARB-wide risk plan.
• Conduct quality reviews of BSTD's compliance with risk management policies and framework, including risk management outcomes and activities within the SARB Group.
• Compile and coordinate reports on I&T risk management outcomes and activities for BSTD management and relevant stakeholders and provide quarterly operational risk assessment reports to RMCD.
• Research and benchmark leading I&T risk management processes and developments and propose improvements accordingly.

Qualifications

To be considered for this position, candidates must be in possession of:

• a minimum of a Bachelor's degree in Risk Management, Auditing or another relevant field at NQF 7, or an equivalent qualification; and
• a minimum of five to eight years of experience in a relevant I&T auditing and risk management environment.

The following would be an added advantage:

• a Certified Risk Professional (CRP) qualification; and
• a COBIT qualification.

Additional requirements include:

knowledge and skill in:

• industry, organisational and business knowledge;
• continuous improvement;
• quality assurance;
• continuous learning and/or professional development;
• risk management principles, tools, methodologies, frameworks, policies and processes;
• risk management strategy and planning;
• risk identification, analysis and assessment;
• risk mitigation and management;
• risk monitoring and reporting;
• project management;
• ISO 31000 standards, King V and COSO framework; and
• information technology risks and controls.