IT Risk Specialist

**Introduction**
- Through our client-facing brands Metropolitan and Momentum, with Multiply (wellness and rewards programme), and our other specialist brands, including Guardrisk and Eris Property Group, the group enables business and people from all walks of life to achieve their financial goals and life aspirations. We help people grow their savings, protect what matters to them and invest for the future. We help companies and organisations care for and reward their employees and members. Through our own network of advisers or via independent brokers and utilising new platforms Momentum Metropolitan provides practical financial solutions for people, communities, and businesses.

**Disclaimer**
- As an applicant, please verify the legitimacy of this job advert on our company career page.

**Role Purpose**
- Executing the Technology and Digital risk management for the Momentum Health Solutions business (including Momentum Health Corporate).

**Requirements**:
**Qualification**:

- Matric or Equivalent
- Relevant IT Tertiary education
- CISA Certification
- CRISC Certification is preferable

**Experience**:

- 5 or more years of experience in Enterprise Risk Management, Compliance and Audit
- Minimum of 3 - 5 years IT, IT Audit or Information security risk management experience
- Minimum of 3 - 5 years of experience in a management or supervisory role
- Proven experience and understanding of Cyber and IT security practices
- Proven experience and understanding of IT projects risk management
- Working in a short-term insurance or health environment (advantageous)

**Duties & Responsibilities**

**Internal Process**:

- Providing guidance to IT Management on effective IT risk management standards, approaches and treatment
- Accountable for identifying, evaluating, and reporting on risk controls in a manner that meets compliance, and government regulations
- Identify weaknesses in the technology control environment and ensure business remedial actions
- Technology Control Assessment and associated remediation, including running health check audits
- Ensure implementation of and alignment to Group IT Risk management strategy and initiatives
- Ensure implementation of Group IT Risk management strategy and initiatives. that the Information Security within MHS adopt adequate security and control tooling, solutions
- Facilitate risk working groups to help promote and champion the IT operational risk agenda across the group and help enhance the overall risk culture
- Support standardisation of risk controls, risk management processes and procedures, and ensure adherence to company policy and procedures
- Responsible for Monitoring and reporting on remediation actions and programs addressing technology risks
- Accountable for IT risk management program (strategic and operational)
- Provide oversight on the IT Risk Officer facilitated IT risk assessments and risk management processes
- Manage the ISAE3402 for MHS for all for main IT platforms (Reflections, Isquare, O2 and Oracle)
- Provide oversight on the IT Risk Officer work which will include facilitation of the ISAE3402, Logical Access Reviews across all platforms, tracking of audit findings (both internal and external) and IT controls weaknesses identified by management or through risk assessments or compliance monitoring
- Assist management in their identification and management of risks for Strategic IT (e.g., migrations and take-ons) and Digital projects

**Client**:

- Build and maintain relationships with clients and internal and external stakeholders
- Deliver on service level agreements applicable to clients and internal and external stakeholders in order to ensure that client expectations are managed
- Make recommendations to improve client service and fair treatment of clients within area of responsibility
- Participate and contribute to a culture which builds rewarding relationships, facilitates feedback and provides exceptional client service
- Continuously monitor turnaround times and quality standards and resolve issues speedily to enhance client service delivery
- Drive client service delivery goal achievement in line with predefined standards in order to ensure that clients receive appropriate advice and after sales service
- Manage client query processes and ensure that queries are tracked, accurately resolved and used as a mechanism to improve client service and business processes

**People**:

- Build strong relationships through providing specialist know-how and leadership to others, expressing positive expectations
- Positively influence and manage change and offer specialist support where required
- Contribute to continuous innovation through the development, sharing and implementation of new ideas and involvement of colleagues and staff
- Participate and contribute to a culture of work centric thinking, productivity, service delivery and quality management
- Take ownership for driving career development

**Finance**:

- Contribute to the dev