Manager: IT Risks

5 months ago

Bellville, South Africa University of the Western Cape Full time

Post Number- 8026354- Faculty/Department- University of the Western Cape -> ICS Department -> IT Operations & Services- Type of Position- Permanent - Full Time- Length of Contract Period- Location- Main Campus - Bellville, WC ZA (Primary)
- Closing Date- 22/9/2024**Role Clarification & Key Performance Areas**

The University of the Western Cape (UWC) seeks to appoint an experienced Information & Technology Risk Manager in its Information and Communication Services (ICS) department.

The University has set itself exciting and challenging goals in its Institutional Operating Plan (IOP), which rely heavily on ICT to deliver integrated solutions that enable and support its Academic and Research programs, and its Administrative and Professional Services departments.

This permanent position, based at the Bellville main campus, will report to the Deputy Director ICS: Governance Risk and Compliance (GRC) and will play a pivotal role in maturing the University's IT Risk Management functional domain and capabilities in the areas of: IT Risk Identification; IT Risk Assessment; IT Risk Response & Mitigation; IT Risk and Control Monitoring & Reporting.

This is a demanding but very stimulating role, which requires an experienced individual with the appropriate breadth and depth of business and technical skills and competencies.

We invite you to join our team in a very exciting time in the University's history.

**Key Performance Areas**:
**1. IT Risk Identification**
- Identify and classify potential threats and vulnerabilities across the university's people, information, processes, and technology.
- Develop comprehensive IT risk scenarios and stakeholder accountabilities to gauge their impact on achieving business goals and objectives.
- Maintain the IT risk register to incorporate identified risk scenarios into the institutional risk profile and combined assurance practices.

**2. IT Risk Assessment**
- Assess, maintain and evaluate existing control effectiveness for IT risk mitigation.
- Ensure clear accountability by assigning risk ownership at appropriate levels.
- Communicate risk assessment outcomes to senior management for informed decision-making.

**3. IT Risk Response & Mitigation**
- Support risk owners in developing risk action plans where necessary.
- Advise on the design, implementation, or adjustment of mitigating controls to manage risks effectively.
- Maintain the IT Risk and Control Matrix.
- Assist control owners in developing control procedures for efficient execution.
- Validate the execution of risk responses as per action plans.
- Contribute to developing a risk awareness program to foster a risk-aware culture and facilitate risk training.

**4. IT Risk and Control Monitoring & Reporting**
- Assist with the ongoing refinement and improvement of IT risk-related dashboard reports.
- Assist with the preparation and dissemination of IT Risk management reports, ensuring reporting deadlines are met.
- Establish key risk and performance indicators (KRIs and KPIs) and thresholds to measure risk control performance and monitor changes or trends in the IT risk profile.
- Report on the performance, changes, or trends in the overall IT risk profile and control environment to management and stakeholders for decision-making.

**5. Internal/External Audits/Compliance**
- Co-ordinate activities required to fulfil the requirements of efficient internal and external IT audits.
- Provide consultation and advice on audit scope, remediation, and strategic items related to the IT audits and control environment.
- Represent IT at the UWC Personal Information Reference Group which co
- ordinates the institution’s response to managing the POPIA compliance risk.

**Minimum Requirements**
- Possess a Bachelors degree in Information Systems or Computer Science or an equivalent NQF-7 qualification, coupled with a minimum of 5 years of experience in IT Risk Management **or**:

- Alternatively, hold an internationally recognised risk management certification within the industry accompanied by a minimum of 8 years of relevant and equivalent experience in IT Risk Management
- Proficiency in legal, regulatory, standards, governance and other compliance requirements pertaining to IT Risk Management and a higher education environment (e.g. COBIT, ISO2700x, ISO31000, ISO27701, COSO, NIST, CIS, POPIA etc.)

**Preferred requirements include**:

- The international CRISC (Certified in Risk and Information Systems Control) certification;
- An accredited certification in Problem Management (e.g. Kepner Tregoe or related ITIL intermediate course);
- Experience in IT Service Management, including incident and problem management;
- COBIT-5 certification in IT Governance;
- Experience in developing and maintaining IT Risk management policies, processes and procedures aligned to recognised industry leading practice;
- Good understanding of threats and vulnerabilities relating to: data management; the software development lifecycle (SDLC);

  • Risk Manager: Enterprise Risk Management

    2 weeks ago

    Bellville, South Africa Santam Full time

    What will you do? Enterprise Risk Management has a position available for a Risk Manager who will be based in Bellville. **The Risk Manager will support the Head**: ERM to monitor the overall risk profile of Santam, by enabling the identification of emerging risks in daily operation of the business. This will be achieved by providing oversight in the form...

  • IT Risk Manager

    7 months ago

    Bellville, South Africa Sanlam Full time

    **Who are we?** Sanlam Group Technology is responsible for the provision of a digitally enabled technology service as a group COE, drive business and transformation and provide group-wide digital and data architecture. We operate the various technology platforms and shared services, ensure Cyber and Information Security resilience, and act as technology...

  • IT Risk Manager

    8 months ago

    Bellville, South Africa Health Solutions Full time

    **Introduction** - Through our client-facing brands Metropolitan and Momentum, with Multiply (wellness and rewards programme), and our other specialist brands, including Guardrisk and Eris Property Group, the group enables business and people from all walks of life to achieve their financial goals and life aspirations. We help people grow their savings,...

  • Risk Manager

    7 months ago

    Bellville, South Africa Exceed Recruitment and Human Resource Consultants Full time

    **Reference**: 9314 CM **Consultant**: Christa Mostert Strong analytical and problem-solving skills, with the ability to assess legal risks and provide strategic advice. Excellent communication and interpersonal skills, with the ability to effectively collaborate with internal stakeholders and external legal counsel. Attention to detail and the ability to...

  • Manager: IT Risks

    2 weeks ago

    Bellville, South Africa University of the Western Cape Full time

    **IT Risk Identification** - Identify and classify potential threats and vulnerabilities to the University's people, information, processes and technology to enable IT risk analysis, - Develop a comprehensive set of IT risk scenarios, and identify accountable stakeholders, based on available information to determine the potential impact to business...

  • Risk Manager

    5 days ago

    Bellville, South Africa Sanlam Full time

    **Who are we?** Sanlam Life and Savings (SLS) is focused on serving our retail and corporate clients in South Africa and further developing our strategic advantages in the South African market. Sanlam Life and Savings consists of three clusters - Sanlam Corporate, Sanlam Retail Mass and Sanlam Retail Affluent. The Sanlam Life and Savings Office provides...

  • IT Risk Administrator

    3 months ago

    Bellville, South Africa Sanlam Full time

    **Who are we?** Sanlam Group Technology is responsible for the provision of a digitally enabled technology service as a group COE, drive business and transformation and provide group-wide digital and data architecture. We operate the various technology platforms and shared services, ensure Cyber and Information Security resilience, and act as technology...

  • IT Risk Administrator

    7 months ago

    Bellville, South Africa Sanlam Full time

    **Who are we?** Sanlam Group Technology is responsible for the provision of a digitally enabled technology service as a group COE, drive business and transformation and provide group-wide digital and data architecture. We operate the various technology platforms and shared services, ensure Cyber and Information Security resilience, and act as technology...

  • IT Risk Administrator

    6 days ago

    Bellville, South Africa Sanlam Full time

    Who are we? Sanlam Group Technology is responsible for the provision of a digitally enabled technology service as a group COE, drive business and transformation and provide group-wide digital and data architecture. We operate the various technology platforms and shared services, ensure Cyber and Information Security resilience, and act as technology...

  • IT Risk Officer

    4 months ago

    Bellville, South Africa Health Solutions Full time

    **Introduction** - Through our client-facing brands Metropolitan and Momentum, with Multiply (wellness and rewards programme), and our other specialist brands, including Guardrisk and Eris Property Group, the group enables business and people from all walks of life to achieve their financial goals and life aspirations. We help people grow their savings,...

  • Risk Surveyor

    5 days ago

    Bellville, South Africa Santam Full time

    What will you do? This career opportunity is available at Santam Commercial Underwriting, Survey Department for a Risk Surveyor to be based in Cape Town. Conducting desktop and physical surveys. Review external surveys as required and provide summery of the risk and risk reduction requirements. What will make you successful in this role? The role of a...

  • Risk Surveyor

    2 days ago

    Bellville, South Africa Santam Full time

    What will you do? This career opportunity is available at Santam Commercial Underwriting, Survey Department for a Surveyor to be based in East London. Conducting desktop and physical surveys. Review external surveys as required and provide summery of the risk and risk reduction requirements. What will make you successful in this role? The role of a...

  • Risk & Contracts Manager

    7 months ago

    Bellville, South Africa CBRE Excellerate Full time

    Position title : RISK & CONTRACTS MANAGER Position reports to : BUSINESS UNIT LEAD Business Unit : FACILITIES MANAGEMENT **Main purpose / objective of the position**: To oversee the creation, execution, analysis, management and control of soft services and maintenance contractors across the account, including negotiating terms, monitoring compliance, and...

  • Incident Manager

    6 days ago

    Bellville, South Africa Progressive IT Resourcing Full time

    Under general direction, assesses complex situations that involve greatest risk. Provides guidance, manage and coordinate the resolution of Major IT incidents to minimise impact and downtime to the Business. **Cape Town based** **ROLE RESPONSIBILITIES** - Facilitate the recovery of all P1/P2 incidents with appropriate reporting and notifications to key...

  • Risk Manager: 9314 Cm

    1 day ago

    Bellville, South Africa Exceed Recruitment and Human Resource Consultants Full time

    **Reference**: 9314 CM **Consultant**:Christa Mostert - Strong analytical and problem-solving skills, with the ability to assess legal risks and provide strategic advice. - Excellent communication and interpersonal skills, with the ability to effectively collaborate with internal stakeholders and external legal counsel. - Attention to detail and the...

  • Incident Manager

    2 days ago

    Bellville, South Africa Progressive IT Resourcing Full time

    **Who are we?** Company Group Technology is responsible for the provision of a digitally enabled technology service as a group COE, drive business and transformation and provide group-wide digital and data architecture. We operate the various technology platforms and shared services, ensure Cyber and Information Security resilience, and act as technology...

  • Business Continuity Management Specialist

    3 weeks ago

    Bellville, South Africa Progressive IT Resourcing Full time

    **What will you do?** **Core outputs** - Strategic and tactical plans for the BCM competency - An IT DRP offering to all the Businesses - Business Continuity Planning service offering to select Businesses - Risk and Governance - Training - Service Line manager for Work Area Recovery (WAR) - General: - Development of BCM stakeholder roles throughout Group,...

  • Project Manager Ref: Zr

    2 weeks ago

    Bellville, South Africa Progressive IT Resourcing Full time

    We are currently recruting for a Project Manager to assist with on a project Contract - 12 months, based in Cape Town **Key Responsibilities**: - Take responsibility for the delivery of one large and two smaller-sized projects, from initiation to completion in the Collective Investment Scheme business: - Inception, Initiation and Implementation of a...

  • BI Technical Delivery Manager

    2 weeks ago

    Bellville, South Africa Progressive IT Resourcing Full time

    **Our Client?** Company Group Technology is responsible for the provision of a digitally enabled technology service as a group COE, drive business and transformation and provide group-wide digital and data architecture. We operate the various technology platforms and shared services, ensure Cyber and Information Security resilience, and act as technology...

  • Governance and Risk Manager

    7 months ago

    Bellville, South Africa Sanlam Full time

    **About Sanlam Corporate** - Our vision is to be the preferred partner to Corporate and Public Sector by providing an awesome client experience and comprehensive solutions that enable the financial resilience and prosperity of those entities and their employees. We tap into over 100 years of expertise to provide cost-effective Employee Benefits and...