IT Risk Analyst I

**Purpose of the Job**:
At Shoprite you will be part of delivering business solutions to some of the most recognized South African Retail brands and you’ll do it by working with an amazing IT team on best of breed of technologies. We’re proud to be publicly recognized as the largest private sector employer in South Africa and a leading employer in Africa. We focus on attracting, developing, and retaining a loyal and committed workforce, dedicated to the Group’s culture and organisational objectives.

The purpose of the IT Risk Analyst role is to measure and monitor Risk within the IT Risk Management Framework. The role is responsible for assisting in the implementation and management of enterprise risk including IT Risk and lead by example in contributing to a culture that builds rewarding relationships, facilitates feedback and provides exceptional client service. Your specialised knowledge of IT Risk generally and IT Risk specifically will be a key success factor in raising IT Risk awareness through various mechanisms and providing IT Risk advisory services. The role reports to the IT Risk Manager.

**Job Objectives**:
Build strong relationships with internal and external stakeholders at all levels and the wider Risk, Legal and Compliance community to remove hurdles and obstacles and co-create an empowered and risk-aware culture
- Engage with relevant internal stakeholders to advise them on the risk profile and to keep them in the loop of issues that need to be escalated
- Conduct the risk assessment component of identified risks as well as periodic reviews and monitoring of existing risk registers
- Ensure appropriate governance, risk management and internal controls are in place internally and with clients.
- Maintain, update, monitor and report on the risk profile of each business
- Identify changing client needs and incorporate client feedback into improved business processes and systems
- Participate in internal group forums to ensure local business is kept abreast of relevant Risk events and initiatives, take note of key action points and follow-through to ensure execution
- Work closely with business to co-create plans and solutions and ensure proactive risk management is embedded in their processes
- Work closely with business and information technology to flag and mitigate material IT risks
- Produce Risk reports highlighting areas of concern, opportunities and anything requiring further investigation
- Conduct regular interviews to assess and monitor risks
- Continuously monitor and evaluate the overall IT risk profile across risk spectrum for relevant department(s) to provide a combined assurance view
- Ensure the audit plan speaks to the risks identified in the risk plan
- Identify internal and external Risk trends
- Act in an ethical, transparent, and morally defensible manner, including highlighting unethical practices
- Identify financial and business risks and escalate accordingly
- Identify opportunities to enhance efficiencies and reduce wasteful expenditure
- Set the pace and tone for the Risk function and ensure everyone is focused on the right priorities
- Create a positive work climate and culture to energise team members, minimise work disruption and maximise team members productivity
- Action/ behaviour are consistent with Shoprite’s values
- Continuously drive own professional development and engage constructively with performance feedback
- Handle stress in ways that do not negatively impact others
- Continually share, debate, and communicate learnings
- Work collaboratively with others to achieve shared goals, including flagging and debating issues constructively
- Positively influence and manage change

**Qualifications**:
Matric with extensive, relevant, and demonstrable job-related experience in Governance, Risk and Compliance in an IT team - (essential)
- Degree in Information Systems / B.Sc Computer Science / B.Eng, BTech (or similar) - (preferred)
- Certifications in IT Risk/ Cyber security/ General and Application Controls

**Experience**:
3-5 years’ experience in IT Governance, Risk and Compliance in a team leadership position or similar - with specific exposure to - IT governance, compliance, risk, and Information Security practices within the context of IT Frameworks, policies, procedures and guidelines - (essential)
- Exposure to Information Systems Risk, Monitoring Mechanisms and Audit - (essential)
- Understanding of operating systems, databases, transactional systems, and connectivity - (highly beneficial)
- Any additional exposure to Agile projects and cross-functional matrix structures - (highly beneficial)

**Knowledge and Skills**:

- Self-motivated and driven with strong integrity - take accountability for actions and mistakes.
- Critical and Analytical thinker - analyse the governance context, identify compliance risks, establish practice standards and monitoring mechanisms.
- Influencer - shares views and shapes risk awareness and integration in op