Manager, Info Risk Monitoring & Assurance at Standard Bank Group

JOB DESCRIPTION

The purpose of this function is to monitor and provide assurance that Standard Bank’s information risks are under explicit management control to prevent significant reputational, financial, information or other loss to Standard Bank and its clients. 

• Monitor Information Risk
• Provide Assurance on Information Risk treatment strategies
• Measure and report on Information Risk

QUALIFICATIONS

• Degree in IT and Computer Sciences
• Preferred: Honours Degree in IT and Computer Sciences
• Information Security and /or Information Risk Certifications (CISSP, CISA, CISM, CRISC or equivalent)
• Familiar with regulatory compliance and information security management frameworks (e.g., IS027000, COBIT, NIST 800, etc.)

Experience and Knowledge required: 

• 7-10 years working experience in an Information Security Management, Information risk practices, Enterprise Risk Management and Information Security Auditing role.
• 7-10 years experience in information risks management (CIATV) through full information lifecycle (Physical, Electronic, Internal and External), controls assurance, progress tracking and reporting on information risk treatment activities at executive level
• 5-7 years experience in an information security / risk role within the banking and /or financial services sector.

ADDITIONAL INFORMATION

Technical competencies: 

• Risk Management- Demonstrates knowledge and understanding of risk management methodologies, tools, governance structures and regulatory requirements for good management of risk.
• Evaluating Risk Management Effectiveness- The ability to determine if risk management and control measures are achieving the desired results and mitigating risks at the expected level.
• Information Security- The management of, and provision of expert advice on, the selection, design, justification, implementation and operation of information security controls and management strategies to maintain the confidentiality, integrity, availability, accountability and relevant compliance of information systems.