Senior Manager: Cyber Risk

2 weeks ago

Johannesburg, Gauteng, South Africa Absa Bank Limited Full time
Bring your possibility to life Define your career with us

  • With over 100 years of rich history and strongly positioned as a local bank with regional and international expertise, a career with our family offers the opportunity to be part of this exciting growth journey, to reset our future and shape our destiny as a proudly African group.
Job Summary

Ensure that all activities for the centre of competence and duties assigned are carried out in full compliance with regulatory requirements, enterprise-wide risk management and governance, management frameworks (and other applicable guidelines), internal policies and standards

Job Description:

The Senior Manager :
Cyber Risk - Third-Party Risk Centre of Excellence will act as Subject Matter Expert, advisor, consultant, and coordinator group wide, therefore must:
Understand the business value chain and leverage from all sub-functions and activities.


Stay abreast of market, tools, methodologies, practice changes and act as an advisor to guide business in managing the applicable risks exposures and provide Research and Development services, support and systems pertaining to Third-Party Cyber Risk.


Be responsible for designing, implementation and monitoring of group-aligned and integrated risk governance, insights & reporting in terms of third-party cyber risks exposure.


Provide advisory, insights and specialist support services to the central functions and business units' processes relating to third-party management in terms of the relevant risk types.


Consult all available enterprise frameworks to shape and inform the PPSG's (Procedures, Policies, Standards and Guidelines) to be adapted by the COE as they relate to the management of third-party cyber risks and provide specialist support to all Business Heads, Executives and Line Management with required governance, controls, monitoring and group wide reporting, in terms of the relevant risk types.


Develop and implement group wide third-party cyber risk proactive and preventative models, controls, processes, systems and tools, KPIs, key risk drivers, and associated risk impacts.

Identify potential risks using data, dashboards, and/or other relevant metrics by analyzing risk information.

Provide advice and recommendations regarding any emerging risks, trends, and early detection of issues for the relevant risk types by employing their capacity and tools to be innovative while recognizing and respecting the need to be prudent in Third-Party risk management.


Support and promote an effective risk culture, where there is an open, proactive, and constructive dialogue in the management of the relevant risk types and enable management to monitor the effectiveness of the control environment and to take action to prevent, mitigate and remediate the relevant risk types, where required.

Key Accountabilities and Responsibilities

Training and Communication

Leadership and Stakeholder Management


Engage and coordinate internal stakeholders across various business areas and functions across the group and external stakeholders (e.g., regulators and other third-parties).

Provide strong leadership (of self), direction and display role model behaviors, inspiring others to work together to achieve the strategic vision.

Build effective working relationships with key stakeholders and information flows across the business units, risk functions and the various entities.

Assist the business units on execution of strategy by providing advice on risk/control and challenge decisions that pose risk. Advise leadership on emerging global third-party risk trends and advise accordingly. Support and influence the organization in improving the third-party risk management through digitization, automation, standardization, and simplification.

Third-Party Risk Management and Governance

Advise on risk decisions and escalate risk decisions to the relevant Head.

Assess the relevance and performance of the third-party risk indicators and thresholds as defined in the monitoring tools and methodologies, leveraging on the business risk appetite or materiality thresholds.

Partner with the second line of defense and in-business unit teams to provide guidance on issue/action documentation, tracking, escalation, and remediation.

Investigate third-party matters affecting the relevant business risk profile, which may pose an undue risk. Oversee deep dive and lessons learnt exercises for material risks, including the review, challenges, and tracking/escalation of findings. Review and lead major remediation plans for adequacy, completeness, and progress. Escalate any unresolved concerns directly to the Business Heads.

Ensure that third-party processes, control requirements and governance frameworks that impact the relevant risk types are documented and understood by all interacting members of the team and value chain.

Create and maintain a central communication portal (knowledge base) for the COE to ensure knowledge content is up to date and rele

  • Senior Cyber Risk Manager: Cib

    2 weeks ago

    Johannesburg, Gauteng, South Africa Nedbank Full time

    Job Purpose To provide expert advice and support on complex aspects within their fields of Cyber Security. To collaboratively perform analysis and support for key stakeholders on complex Cyber Security issues and provide optimum solutions which meet both business and technical requirements while aligning with the Cyber Security strategy and Cyber Resilience...

  • Head: Cyber Risk

    2 weeks ago

    Johannesburg, Gauteng, South Africa Nedbank Full time

    Job Requisition Details REQ# Location: Johannesburg, GautengClosing Date: 15 August 2023- Talent Acquisition: Bongiwe Mchunu- Job Family- Risk, Audit and Compliance Career Stream Enterprise Wide Risk Management Leadership Pipeline Manage ManagersJob PurposeTo ensure that the Group Risk Framework is embedded; operationalised and implemented. Advise business...

  • Manager: Cyber and Strategic Delivery

    2 weeks ago

    Johannesburg, Gauteng, South Africa Nedbank Full time

    Requisition Details & Talent Acquisition Consultant Tshegofatso SemenyaLocation 135 Rivonia Road, Sandton (Nedbank Head Office)Job Family Information TechnologyCareer Stream IT RiskLeadership Pipeline Manage Self: ExpertJob Purpose To manage cyber risk management activities to reduce cyber risk for the bank; Working independently to deliver on work tasks....

  • Senior Audit Manager – Cyber, Digital and

    2 weeks ago

    Johannesburg, Gauteng, South Africa Six Sense Consulting Full time

    Qualification: 8 10 years financial services experience in a senior position Advanced Diplomas/National 1st Degrees Minimum required qualification: Commercial or related degree CISA; CRISK; CISM (or another relevant IT Qualification Cyber experience in a Banking institute Ability to operate at a Senior level Leadership experience leading team. Significant...

  • Senior Manager: IT Governance, Risk and Cyber

    2 weeks ago

    Johannesburg, Gauteng, South Africa PC Staffing Solutions Full time

    PURPOSE OF THE JOB:To drive the successful delivery of the IT Governance, Risk and Cyber Security, strategy implementation and theeffective running of the Office of the CIO by ensuring the attainment of the Sasria objectives internally and externally.Qualifications: Information Technology (IT) related Bachelors Degree at NQF level 7 as recognized by SAQA...

  • Audit Portfolio Manager Cyber

    2 weeks ago

    Johannesburg, Gauteng, South Africa Nedbank Full time

    Requisition Details & Talent Acquisition ContactREQ Tshego SemenyaLocation: JohannesburgClosing date: 26 April 2024ClusterGroup RiskCareer StreamAuditingLeadership PipelineManage Self ProfessionalPositionAudit Portfolio Manager: CyberJob PurposeThe objective and scope of work of GIA is to determine whether the Group's systems of internal controls, risk...

  • Cyber Security

    2 weeks ago

    Johannesburg, Gauteng, South Africa Tower Group Full time

    Cyber Security Specialist required on a Fixed Term Contract in Midrand to oversee and manage initiatives within the financial services, insurance, and lending sector.A Deep understanding of cyber security practices and trends as well as leadership skills necessary to guide a team of professionals in implementing and maintaining an effective and comprehensive...

  • Cyber Security

    2 weeks ago

    Johannesburg, Gauteng, South Africa Tower Group Full time

    Cyber Security Specialist role available on a Fixed Term Contract in Midrand. Opportunity to lead initiatives in the financial services, insurance, and lending sector. Seeking someone with a deep understanding of cyber security practices and trends, along with strong leadership skills to manage a team of professionals in effectively implementing and...

  • Audit Portfolio Manager Cyber

    2 weeks ago

    Johannesburg, Gauteng, South Africa Nedbank Full time

    Requisition Details & Talent Acquisition Contact REQ Tshego Semenya Location: JohannesburgClosing date: 26 April 2024ClusterGroup RiskCareer StreamAuditingLeadership PipelineManage Self ProfessionalPosition Audit Portfolio Manager: CyberJob PurposeThe objective and scope of work of GIA is to determine whether the Group's systems of internal controls, risk...

  • Cyber Security Consultant

    2 weeks ago

    Johannesburg, Gauteng, South Africa HR Genie Full time

    The role of the Cybersecurity Consultant includes contribution to technical insights relevant to client engagements and internal projects. Actively establish, maintain and strengthen internal and external relationships. Execution of cybersecurity engagements.The Cybersecurity Senior Consultant will be responsible for the following key activities to achieve...

  • Manager: Cyber Assurance

    2 weeks ago

    Johannesburg, Gauteng, South Africa Nedbank Full time

    Requisition Details & Talent Acquisition Consultant REQ Tshegofatso SemenyaJob Family Risk, Audit and ComplianceCareer Stream AuditingLeadership Pipeline Manage Self ProfessionalJob Purpose To perform assurance activities in the form of control reviews and risk assessments on various cyber elements in the bank, Collaborate with other functions in the bank to...

  • Senior Risk Manager: It

    2 weeks ago

    Johannesburg, Gauteng, South Africa Nedbank Full time

    Job Family- Risk, Audit and Compliance Career Stream Operational Risk Leadership Pipeline Manage Self: ProfessionalJob Purpose To develop and monitor the implementation of the Operational Risk Management Framework in Nedbank and its subsidiaries to comply to regulatory requirements and ensure alignment to international best practiceResponsibilities: IT Risk...

  • IT Governance, Risk and Compliance Specialist

    2 weeks ago

    Johannesburg, Gauteng, South Africa National Risk Managers Full time

    A Medical Insurance Company based in Benoni, Gauteng is looking for a IT Governance, Risk and Compliance Specialist who will assist in the development and implementation of IT Governance frameworks and IT controls following appropriate methodology approved by management that is aligned with international and financial industry standards (e. g, GOI standards...

  • Cyber Security Manager

    2 weeks ago

    Johannesburg, Gauteng, South Africa SNG GrantThornton Full time

    Responsibilities: Manage and lead a team of cyber security professionals; Undertake project planning, execution and management of cyber security assignments; Manage and or perform cybersecurity managed services assignments; Form partnerships with cybersecurity third parties and OEMs Manage Third Parties and OEMs and partnerships; Manage and provide...

  • Cyber Security Analyst

    2 weeks ago

    Johannesburg, Gauteng, South Africa Hollard Recruitment Full time

    Job Advert Summary:Your role.Your businessEstablished in Australia in 1999 and still privately owned, we offer a variety of specialised products such as competitive General, Pet and Bicycle Insurance through our Agencies and Partners. At Hollard we are agile, continuously growing and gaining market share.Your TeamReporting into the Cyber Security Manager...

  • IT Governance, Risk and Compliance Specialist

    2 weeks ago

    Johannesburg, Gauteng, South Africa National Risk Managers (Pty) Ltd Full time

    A Medical Insurance Company based in Benoni, Gauteng is looking for a IT Governance, Risk and Compliance Specialist who will assist in the development and implementation of IT Governance frameworks and IT controls following appropriate methodology approved by management that is aligned with international and financial industry standards (e. g, GOI standards...

  • Cyber Security Technical Manager

    2 weeks ago

    Johannesburg, Gauteng, South Africa Boardroom Appointments Full time

    Key purpose:As a member of the Global IT Team, you will help develop and maintain the cyber security program and serve as the de facto technical security expert. This role is responsible to provide support and oversight to internal and external teams to ensure incidents and threats are properly handled.Duties and responsibilities: Support the design,...

  • Senior Audit Manager

    2 weeks ago

    Johannesburg, Gauteng, South Africa Six Sense Full time

    Gauteng, Johannesburg Annually Cost To Company (Market related)A well-established Travel company is seeking Senior Audit Manager - Cyber, Digital and TechnologyTo provide strategic leadership and guidance to teams by providing independent assurance of the control environment to the company's Audit Committee and ensuring effective risk management practices...

  • Cyber Security

    2 weeks ago

    Johannesburg, Gauteng, South Africa Recruitment Matters Africa Full time

    Our client is looking for a Cyber Security To play a pivotal role in ensuring the delivery of a high quality, accurate and timely professional service to the company by ensuring successful completion of assigned Cyber Security related audit engagements from start to finish, inclusive of preplanning and wrap up activities.Responsibilities: Manage the delivery...

  • Avsec Risk Management Specialist

    2 weeks ago

    Johannesburg, Gauteng, South Africa Affirmative Portfolios Full time

    AviationJHB North***: OUTLINEAVSEC Risk Management SpecialistJOHANNESBURGPERMANENTSALARY - MARKET RELATEDOverview: Develop and manage an Aviation Security Risk Management System. Develop and monitor Cyber Security Governance Framework, incorporating norms and standards for managing cyber security within the aviation industry. Ensure the company achieves its...