(1929) I&T Risk Analyst - BSTD

The main purpose of this position is to embed and maintain risk management processes, frameworks and policies, including information and technology (I&T), within the South African Reserve Bank’s (SARB) Business Solutions and Technology Department (BSTD) to respond to risk exposures and leverage opportunities.

Detailed description

The successful candidate will be responsible for the following key performance areas:

• Embed the SARB Group risk management frameworks, methodologies, processes, systems and related policies within BSTD.

• Embed the SARB’s I&T risk management frameworks.

• Analyse and understand the business environment to support and guide the identification of risks and opportunities.

• Conduct I&T operational risk assessments in BSTD.

• Identify emerging risks in BSTD and report on them to BSTD management and the SARB’s Risk Management and Compliance Department (RMCD).

• Consolidate, maintain and report on action plans recorded in the SARB Group’s centralised risk incidents database.

• Identify and coordinate departmental risk management training needs and conduct related training.

• Assess and analyse risks related to IT applications and IT general controls to ensure IT risks are identified and managed.

• Embed and promote a positive and proactive risk management culture across BSTD.

• Facilitate sessions for the operational risk management assessments in BSTD in accordance with the SARB Group Risk Management Framework.

• Provide input into the overarching SARB-wide risk plan.

• Conduct quality reviews of BSTD’s compliance with risk management policies and framework, including risk management outcomes and activities within the SARB Group. 

• Compile and coordinate reports on I&T risk management outcomes and activities for BSTD management and relevant stakeholders and provide quarterly operational risk assessment reports to RMCD.

• Research and benchmark leading I&T risk management processes and developments and propose improvements accordingly.

To be considered for this position, candidates must be in possession of:

• a minimum of a Bachelor’s degree in Risk Management, Auditing or another relevant field at NQF 7, or an equivalent qualification; and

• a minimum of five to eight years of experience in a relevant I&T auditing and risk management environment.

The following would be an added advantage:

• a Certified Risk Professional (CRP) qualification; and

• a COBIT qualification. 

Additional requirements include:

• knowledge and skill in:

• industry, organisational and business knowledge;

• continuous improvement; 

• quality assurance; 

• continuous learning and/or professional development; 

• risk management principles, tools, methodologies, frameworks, policies and processes;

• risk management strategy and planning;  

• risk identification, analysis and assessment;  

• risk mitigation and management;  

• risk monitoring and reporting;  

• project management;

• ISO 31000 standards, King V and COSO framework; and

• information technology risks and controls. 

   

In line with the SARB’s commitment to diversifying its workforce, preference will be given to suitable candidates from designated groups. People with disabilities are welcome to apply.

The SARB offers remuneration and benefits commensurate with the level of the position and in line with the market. The level at which the successful applicant will be appointed will depend on his/her competence and experience.