Head: Cyber Risk

3 weeks ago


Johannesburg, South Africa Nedbank Full time

**Job Requisition Details**
- REQ#127939- Location: Johannesburg, Gauteng- Closing Date: 15 August 2023- Talent Acquisition: Bongiwe Mchunu- Job Family- Risk, Audit and Compliance
- Career Stream- Enterprise Wide Risk Management
- Leadership Pipeline- Manage Managers

**Job Purpose**

To ensure that the Group Risk Framework is embedded; operationalised and implemented. Advise business on strategic direction to meet business objectives; mitigate risks and meet regulatory requirements. Lead the cyber risk centre of excellence and support cluster in the implementation of cyber risk assessments, strategy, cyber security programme, policies, standards, reporting of all cluster-specific cyber security programme elements and regulatory matters as it relates to cyber security.

**Responsibilities**:

- Establish and embed enterprise-wide and operational risk frameworks and policies.
- Collaborate with other risk functions across the cluster and group. Lead the engagement between the cluster, information privacy office, group technology risk and group risk information security office.
- Manage, support, and assist with coordination of cluster enterprise risk committees and reporting into the group risk committees.
- Manage risk associated with data, digital, information technology and payments ecosystem.
- Manage innovation and product development risk.
- Manage and embed Cyber Risk Management Framework in the cluster.
- Provide strategic risk advise to the cluster risk and business executives, and divisional heads of enterprise risk management.
- Report, present accurate and insightful operational risk information at various management and oversight committees.
- Develop risk plans that enable the implementation of the business strategy.
- Ensure compliance with policies and regulations.
- Drive third party risk management strategy in the cluster including relevant cyber security assessments.
- Drive compliance to information security and standards on cluster infrastructure.
- Keep business updated on a regular basis and analyse information generated from the risk exercises.
- Ensure business processes and systems are functioning by identifying and documenting risks.
- Lead and create an environment of teamwork, encouraging staff to participate in decision-making processes.
- Mitigate risks by providing the business with relevant information, guidance, and advice.
- Actively assist the business to manage all risk types and participate in business and risk forums.
- Keep abreast of regulatory and banking trends including digitisation of banking services.
- Essential Qualifications - NQF Level- Advanced Diplomas/National 1st Degrees
- Preferred Qualification- Bachelor’s Degree in Finance/Commerce/Risk Management/ Information Technology/ Data Analytics/ equivalent.
- Honours/ Master’s Degree in Finance/Commerce/Risk Management/ Information Technology/ equivalent will be considered an added advantage.
- Type of Exposure- Banking products, processes, and systems.
- Managing a team of managers.
- Coaching and mentoring others.
- Developing a divisional strategy plan.
- Developing a stakeholder management grid for the business.
- Developing resource plans to execute functional strategies.
- Developing a client service delivery plan.
- Managing business risks.
- Minimum Experience Level- 8 years’ experience in Banking/ Financial services.
- 5 years’ experience in Operational Risk/ Enterprise Risk Management and/or Information Technology/Data Management and external/internal audit.
- Exposure to Nedbank Operational Risk Management Framework (ORMF) and Enterprise-wide Risk Management Framework (ERMF).

**Technical / Professional Knowledge**
- Budgeting
- Business terms and definitions
- Capacity planning
- Client service management
- Communication Strategies
- Diversity management
- Financial Accounting Principles
- Governance, Risk and Controls
- Organisational behaviour theory
- Principles of project management
- Relevant regulatory knowledge
- Stakeholder management
- Strategic planning
- Risk Management Policies,Procedures and Best Practices(ERM and ORM Knowledge)
- Business Reporting Skills
- Behavioural Competencies- Building Partnerships
- Coaching
- Continuous Learning
- Customer Focus
- Facilitating Change
- Influencing
- **_Please contact the Nedbank Recruiting Team at +27 860 555 566_



  • Johannesburg, South Africa Nedbank Full time

    **Requisition Details & Talent Acquisition Consultant** - 131543 - Tshegofatso Semenya**Location** - 135 Rivonia Road, Sandton (Nedbank Head Office)**Job Family** - Information Technology **Career Stream** - IT Risk**Leadership Pipeline** - Manage Self: Expert **Job Purpose** - To manage cyber risk management activities to reduce cyber risk for the bank;...


  • Johannesburg, South Africa Khomeliwa Consulting Full time

    **SENIOR MANAGER: IT GOVERNANCE, RISK AND CYBER SECURITY, Sandton,** **R800k - R1,2m p/a** Our client is a short-term insurance company and they seek to appoint the Senior Manager: IT Governance, Risk and Cyber Security. The incumbent will report to the CIO. **JOB PURPOSE** To drive the successful delivery of the IT Governance, Risk and Cyber Security,...


  • Johannesburg, South Africa National Risk Managers Full time

    A Medical Insurance Company based in Benoni, Gauteng is looking for a  IT Governance, Risk and Compliance Specialist who will  assist in the development and implementation of IT Governance frameworks and IT controls following appropriate methodology approved by management that is aligned with international and financial industry standards (e. g, GOI...


  • Johannesburg, South Africa National Risk Managers (Pty) Ltd Full time

    A Medical Insurance Company based in Benoni, Gauteng is looking for a **IT Governance, Risk and Compliance Specialist** who will assist in the development and implementation of IT Governance frameworks and IT controls following appropriate methodology approved by management that is aligned with international and financial industry standards (e. g, GOI...


  • Johannesburg, South Africa PC Staffing Solutions Full time

    **PURPOSE OF THE JOB**: To drive the successful delivery of the IT Governance, Risk and Cyber Security, strategy implementation and theeffective running of the Office of the CIO by ensuring the attainment of the Sasria objectives internally and externally. **Qualifications**: - Information Technology (IT) related Bachelors Degree at NQF level 7 as...

  • Senior Risk Manager

    1 month ago


    Johannesburg, South Africa Nedbank Full time

    **Requisition Number and Talent Acquisition Number** - REQ: - **131364** - Location: Sandton, Johannesburg- Closing Date: 05 February 2024- Talent Acquisition: - **Saranya Govender** - Job Family- Risk, Audit and Compliance - Career Stream- Enterprise Wide Risk Management - Leadership Pipeline- Manage Self: Professional **Job Purpose** - To ensure that...


  • Johannesburg, South Africa HR Genie Full time

    The role of the Cybersecurity Consultant includes contribution to technical insights relevant to client engagements and internal projects. Actively establish, maintain and strengthen internal and external relationships. Execution of cybersecurity engagements. The Cybersecurity Senior Consultant will be responsible for the following key activities to achieve...


  • Johannesburg, South Africa Isilumko Staffing Full time

    A top company in the Energy and Chemical Industry is seeking a highly skilled and experienced Senior IT Auditor with a strong background in Cyber Security to join their dynamic team. As a Senior IT Auditor - Cyber Security, you will play a key role in evaluating and enhancing the security of our IT systems and processes. Key Responsibilities:Cyber Security...

  • Snr Mngr: Int. Audit

    1 month ago


    Johannesburg, South Africa Nedbank Full time

    **Requisition Details & Talent Acquisition Contact** - REQ 124331- Tshego Semenya- Closing date: 13 March 2023**Cluster** - Group Risk - Group Internal Audit**Career Stream** - Auditing **Leadership Pipeline** - Manage Managers **Position** - Senior Audit Manager - Cyber, Digital and Technology**Job Purpose** - To provide strategic leadership and guidance...


  • Johannesburg, South Africa Absa Bank Limited Full time

    Bring your possibility to life! Define your career with us - With over 100 years of rich history and strongly positioned as a local bank with regional and international expertise, a career with our family offers the opportunity to be part of this exciting growth journey, to reset our future and shape our destiny as a proudly African group.Job Summary The...

  • Cluster Head IT Risk

    4 weeks ago


    Johannesburg, South Africa Nedbank Full time

    **Job Classification** - **REQ: 124355 - Refilwe Falatsi**: - **Closing Date: 17 March 2023**: - **Division: Wealth Centre - Risk**: - **Employment Equity Statement: Preference will be given to individuals from underrepresented groups.** - Job Family- Risk, Audit and Compliance - Career Stream- Enterprise Wide Risk Management - Leadership Pipeline- Manage...


  • Johannesburg, South Africa Isilumko Staffing Full time

    Manage and execute IT audits with a specific focus on information and cyber security in order to mitigate information management and cyber security risks impacting operations and to provide subject matter expertise. Manage audit budgets and resource allocations on assigned audit tasks and ensure timely reporting. Monitor the quality of executed audits.


  • Johannesburg, South Africa Tower Group Full time

    **Cyber Security Specialist **required for a **Contract opportunity** in Midrand. This role will provide security assurance, guidance and support to high profile projects according to company defined policies and requirements, best practice and local/international standards (PCI, SOX, ISO27001, GDPR, POPIA and Cyber Crime Bill of 2015) relevant to the...


  • Johannesburg, South Africa Nedbank Full time

    **Requisition Details & Talent Acquisition Contact** - 123981 - Tshego Semenya- Closing date: 5 April 2023**Cluster** - Group Risk**Career Stream** - Auditing- Leadership Pipeline- Manage Self Professional**Position** - Audit Portfolio Manager: Cyber and Information Security**Job Purpose** - To work in collaboration with the various teams within GIA as well...


  • Johannesburg, South Africa Recru-it Full time

    Key Roles and Responsibilities: Determine who requires access to which information & Plan, coordinate, and implement information security programs. Help protect against Web threats that facilitate cyber-crime like malware, phishing, viruses, denial-of service attacks, and hacking. Ensure you know and follow the incident and change processes, Perform Problem...


  • Johannesburg, South Africa Adzuna ZA B C2 Full time

    Key Roles and Responsibilities:Determine who requires access to which information & Plan, coordinate, and implement information security programs.Help protect against Web threats that facilitate cyber-crime like malware, phishing, viruses, denial-of service attacks, and hacking.Ensure you know and follow the incident and change processes, Perform Problem...


  • Johannesburg, South Africa Recru-it Full time

    Key Roles and Responsibilities:Determine who requires access to which information & Plan, coordinate, and implement information security programs.Help protect against Web threats that facilitate cyber-crime like malware, phishing, viruses, denial-of service attacks, and hacking.Ensure you know and follow the incident and change processes, Perform Problem...


  • Johannesburg, South Africa Telebest Full time

    Requirements:5 years of experience in Cybersecurity, engineering, or security vulnerability remediationIn-depth knowledge of MS Azure security platform (MS Intune / DRM / O365 Security)In-depth knowledge of Firewalls and Malicious Code Defence including APTKnowledge of Cybersecurity technical assessments, standards, tools, and processesExtensive knowledge of...


  • Johannesburg, South Africa Nedbank Full time

    Job Family- Risk, Audit and Compliance - Career Stream- Operational Risk - Leadership Pipeline- Manage Self: Professional **Job Purpose** - To develop and monitor the implementation of the Operational Risk Management Framework in Nedbank and its subsidiaries to comply to regulatory requirements and ensure alignment to international best...


  • Johannesburg, South Africa KPMG-SouthAfrica Full time

    Description of the role and purpose of the job: • The individual will be part of the cyber security team and will be responsible for managing engagement relating to cyber incident response Key responsibilities: • Assist in building pipeline and lead business development activities for the service-line • Lead engagement on cyber incident response and...