IT Risk Specialist

Company Description

OUTsurance has been propelling the South African insurance industry forward for the last 24 years. As leaders in the field, we’re always looking for innovative ways to create digitally-advanced solutions, without losing sight of our human values.

Our continued success can be attributed to OUTstanding employees who set the bar high with their energy and expertise. If you’re keen to grow your career in a vibrant environment with lots of friendly ‘gees’, this could be the career opportunity you’ve been looking for.

**Job Description**:
Any business is exposed to a variety of risks. An IT Risk Specialist is a key role in the Risk Management Department to enable management and risk owners to identify and mitigate those risks. The purpose of the role is to be part of a team that facilities a comprehensive process for identifying, assessing, mitigating, monitoring and reporting on risks that the Group face or may face in line with the Group Risk Management Strategy.

The IT Risk Specialist reports to an IT Risk Manager, working closely with a team of Risk Managers and other Risk Specialists.

**Qualifications**:
**Minimum Requirements**:
**Essential**
- Information Technology or Risk Management degree/qualification or currently studying towards a Risk Management qualification;
- 3 to 5 years of Risk experience within an IT environment.
- A strong technical background and knowledge of IT governance, services, processes, and assurance.
- Proficient in MS Office Suite

**Advantageous**
- Experience in IT Risk Management Department
- Certifications (ISACA - CISM, ISACA - CISA, ISACA - CRISC, COBIT Foundation, ITCA Cybersecurity Fundamentals Certificate )

Additional Information
**Key outputs will include the following**:

- Facilitate workshops with department managers and heads (risk owners) to identify, categorize, assess and rate IT-related risks;
- Plan workshops for the year and schedule activities;
- To capture the risks as mentioned above on the risk management system and to maintain the register of risks through regular updates and workshops;
- Analyze different reports to identify risks and controls within each department;
- To report to the Head of Risk and IT Risk Manager on the IT Risk Registers;
- Monitor effectiveness of controls, identify and monitor Key Risk Indicators in relation to approved risk appetite;
- Submit monthly and quarterly detailed reports of risk profiles;
- Monitor, assess, quantify and report on risk events;
- Identification, calculation and reporting of operational losses, especially related to Information Security, IT Development and IT Support;
- Assist with weekly Information Security monitoring;
- Interact with various stakeholders, including the Internal Auditors, Compliance and Quality Assurance teams;
- Develop and maintain knowledge and insights of the business and external environments.

**Combined Assurance**
- Attend various relevant company forums and meetings and actively participate in the activities;
- Interact with various stakeholders, including management, Internal Auditors, Compliance and Quality Assurance teams;
- Relationship building with internal and external stakeholders;
- Maintain a high level of understanding of possible risks and procedures in each department;
**Risk Management Reporting**
- Submit monthly and quarterly detailed reports of risk profiles, operational incidents and losses;
- Provide input to reports to relevant committees, including but not limited to the Internal Risk Committee, Board reports and Audit, Risk and Compliance Committee.

**Special Reporting and Other projects**
- Participate as an individual or as part of a project team on special projects such as:

- Sustainability reporting;
- Own Risk and Solvency Assessment (ORSA)
- Social and Ethics reporting

**Competencies & Attributes**
- Good interpersonal relationships;
- Ability to operate and think independently;
- Problem-solving;
- Decision making;
- Attention to detail;
- Ability to meet deadlines and set priorities;
- Organizing and planning;
- Ability to work under pressure;
- Ability to learn quickly;
- A good sense of judgement;
- Strong written and verbal communication skills;
- Self-disciplined and self-motivated;
- An analytical thinker;
- Takes ownership and responsibility;
- Must maintain strict confidentiality and integrity.

In accordance with the objectives and Employment Equity goals of OUTsurance Insurance Company Ltd, preference will be given to individuals who meet the job requirements and are from the various designated groups.