This role at FNB, based in Johannesburg, calls for a dedicated IT Risk Specialist to bolster the bank's technology risk management capabilities. The core function of this position is to provide expert advisory, oversight, and governance support, ensuring that technology risks are effectively identified, assessed, monitored, mitigated, and reported. This is crucial for maintaining a robust and well-controlled IT environment that aligns with industry governance frameworks, stringent regulatory requirements, and established risk management standards.

Navigating the Technology Risk Landscape

The IT Risk Specialist will play a pivotal role in proactively managing the institution's exposure to technology-related threats. This involves conducting thorough risk assessments across a broad spectrum of IT domains, including applications, infrastructure, ongoing projects, third-party engagements, and daily operational processes. A key responsibility will be evaluating the impact and severity of identified risks, determining both inherent and residual risk exposure, and critically assessing the effectiveness of existing control measures. Furthermore, the specialist will collaborate closely with management to develop and diligently track remediation plans aimed at addressing any identified risks and control weaknesses. A significant part of the role also involves contributing to the preparation and delivery of IT risk reports and participating actively in governance activities, ensuring transparency and informed decision-making.

Monitoring, Compliance, and Strategic Oversight

Beyond proactive identification, the IT Risk Specialist will be instrumental in the continuous monitoring of IT risk indicators and the overall risk posture of relevant business units. This includes analysing trends to identify emerging concerns and providing actionable recommendations for improvement. The role demands meticulous tracking of remediation efforts stemming from audits, self-assessments, control testing, and ongoing monitoring reviews. Regular reporting of residual risks and the timely escalation of critical issues to management and governance forums will be essential.

A crucial aspect of this position is ensuring adherence to organisational policies and compliance obligations. This involves reviewing and recommending updates to IT policies, standards, procedures, and risk frameworks to ensure they remain aligned with legislative, regulatory, audit, and internal governance requirements. Guidance will be provided to business and technology teams on best practices in risk management methodologies and their compliance obligations.

The specialist will also be tasked with providing risk oversight for IT projects and significant changes. This means conducting comprehensive risk assessments for new products, services, major technology initiatives, and strategic projects. Evaluating compensating controls and verifying the proper implementation of risk mitigation actions will be paramount. The role requires active participation in governance forums such as Change Advisory Boards (CABs), Steering Committees, and New Product Approval processes, offering critical risk input. Additionally, the specialist will assess the adequacy of disaster recovery, business continuity, and IT continuity plans, monitor testing programmes, and ensure that material changes are appropriately reflected in these plans. Involvement in incident reviews, root cause analysis, and assessing cyber and information security risks will also form part of the responsibilities.

In South Africa, a specialist IT Risk Officer role like this, particularly within a large financial institution such as FNB, typically requires a solid foundation of 3-5 years of experience in IT risk, audit, or operational risk. Experience within the payments sector is a significant advantage. Salaries for such positions can vary but often fall within a competitive range, reflecting the critical nature of the role in safeguarding the organisation's digital assets and maintaining regulatory compliance. Career progression within this field can lead to more senior risk management positions, heads of IT risk departments, or specialised consulting roles.

Minimum requirements:

At least 3-5 years' experience in IT Risk / Audit / Operational Risk and/or any relevant experience in payments.

Are you interested to take the step? We look forward to engaging with you further. Apply now!

#Post

#RMB

#LI-JB5

Job Details

Take note that applications will not be accepted on the below date and onwards, kindly submit applications ahead of the closing date indicated below.