Brief description
To develop, embed and maintain Information & Technology (I&T) risk management processes, framework and policies to enable the South African Reserve Bank (SARB) and SARB group (where applicable) to respond to risk exposures and leverage on opportunities.
Detailed description
The successful candidate will be responsible for the following key performance areas:
- To embed SARB Group risk management frameworks, methodologies, processes and systems as well as embed related policies.
- To develop, maintain and embed Information & Technology (I&T) SARB risk management frameworks and ensure alignment to the SARB Group risk management frameworks.
- To develop risk management quality criteria and perform quality reviews on risk management outcomes.
- To identify, collate, analyse and report on emerging I&T risks to the SARB and SARB group.
- To facilitate strategic Information & technology (I&T) risk management processes in the SARB and SARB group in accordance with the SARB Group Risk Management Framework.
- To facilitate I&T application and general IT risk assessments to enable business to proactively manage risks relating to technology.
- To assess, analyse and embed IT general risk and control for IT for business processes.
- To coordinate integration of IT general risk and control for ‘IT for IT’ as well as ‘IT for business’ frameworks.
- To identify and coordinate risk management training needs as well as conduct related training.
- To compile and co-ordinate reporting on I&T related risk management outcomes and activities to the SARB Group’s, executives and risk oversight committees.
- To develop the Bank-wide I&T risk overarching plan, co-ordinate and embed operational risk and continuous risk management across the SARB (KRIs, Risk Incidents, Emerging risks).
- To develop risk awareness campaigns to educate stakeholders, influence behaviour and promote a positive as well as proactive risk management culture across the SARB and SARB Group.
- To analyse risk data and information on the various risks registers to identify trends, interconnectedness/polycrisis, commonalities and create qualitative risk reporting and derive reliable business intelligence/insights for management to enable decision making.
- To engage with stakeholders to provide information and support on risk management matters.
- To research and benchmark leading risk management processes and developments propose improvement accordingly.
- To analyse and understand the Bank’s environment (internal and external) in order to support and guide the identification of risks and opportunities to enable decision making.
- To provide input to other specialised risk management processes i.e. policies, methodologies, frameworks (Financial risk management, Cyber and information security, Privacy, Physical security, strategic and operational resilience etc.).
- To manage the implementation of the BSTD strategic and operational risk treatment action plans, and report on their progress and impact on risks.
- To oversee the integration between RMCD and other specialised risk areas.