Job Description
Hello Future IT Risk Specialist
Welcome to FNB, the home of the #changeables. We design for the shapeshifters and deliver products and services that make us incredibly proud of people that make it happen.
As part of our talent team, you will be surrounded by unique talents, diverse minds, and an adaptable environment that lives up to the promise of staying curious. Now’s the time to imagine your potential in a team where experts come together and ignite effective change.
Overview of the role and requirements:
- To provide specialist advice, guidance and support to the business and technology community in ensuring that appropriate development and implementation of an IT Risk management programme is conducted in accordance with governance best practices and IT Risk requirements.
- To oversee the implementation and monitoring of a risk management framework including policies, standards and security.
- The successful candidate should be able to demonstrate relevant data, business intelligence, process-mapping, requirements gathering and reporting experience.
- The sucessful candidate must have a general understanding of mainframe applications, cloud applications and display a reasonable level of understanding of platform-based technology.
- The sucessful candidate must have experience in the banking industry or alternatively, a consulting firm with experience servicing the banking industry.
You will be responsible for:
- Maintaining relevant knowledge on various technology-driven legislative amendments, industry best practices and the provision of proactive advice and solutions to relevant stakeholders (both from the SA and Broader Africa perspectives).
- Maintaining up-to-date knowledge of local and global trends in relation to technology-driven risks.
- Providing subject-matter expertise on industry best practices and global trends.
- Identifying sources of risks, areas of impact, events/root-causes and potential consequences that might create, enhance, prevent, degrade, accelerate, or delay the achievement of key IT objectives.
- Conducting an impact analysis to ensure resources are adequately protected with proper control measures and within acceptable levels of residual risk.
- Assisting the IT stakeholders with creating action plans to mitigate potential risks within the IT environment and comply with governance in terms of legislative, audit and business policy requirements.
- Following-up on deficiencies identified within monitoring reviews, self-assessments, automated assessments, and internal/external audit exercises to ensure that appropriate remediation measures have been taken into consideration.
- Developing and maintaining IT Risk reports for the platform environment, and reviewing/assessing the quality and accuracy of these reports in a timely manner.
- Monitoring and analysing IT Risk performance and generating reports that identify areas needing improvement.
- Developing recommendations by partnering with business and IT in relation to monitoring and reviewing risk performance.
- Identifying areas needing improvement (through continuous monitoring exercises) and developing recommendations to assist the impacted business areas.
- Providing advice and support to business in relation to tools and methodologies that are used to mitigate IT risks and issues, and to strengthen identified control weaknesses.
- Consulting with business and technical IT staff on potential operational impacts of proposed changes to the IT environment.
- Informing stakeholders about IT risk issues and activities affecting the assigned area or project.
- Attending relevant BU committees for core banking products/applications e.g., Monthly BU IT Committees, BU IT Exco, Project Steering Committees, New Product Approval Committees, CAB etc.
- Monitoring the development of DR/BCM test plans, testing, and documentation for each application.
- Reviewing selected change requests to ensure that they are appropriately incorporated into the larger business plan.
- Assisting with the identification of root causes (including identification of control failures) of IT-related incidents and the recommendation of an appropriate mitigation strategy/plan.
- Maintaining an up-to-date understanding of industry best practices. Testing the adequacy of existing controls and recommending actions for improvement.
- Monitoring the Business Unit's compliance with Group Information Security policies and standards with guidance from the respective Information Security Officer (ISO) and IT Risk Manager.
- Overseeing compliance in relation to security training/awareness and action plans to remediate any non-compliance that is noted.
- Assessing and monitoring the risk posture against tolerance, in relation to technology-related risks.
What you will need:
- 3 years experience in an IT Risk role/similiar environment.
- 5 years experience in a banking environment or similiar.
- Relevant degree in Information Technology, Computer Science and/or Risk Management.
- A data/BI certification would be advantageous.
We can be a match if you can:
- Good stakeholders management skills.
- Strong presentation skills.
- Able to hit the ground running.
- Strong communication and interpersonal skills.
- Ability to work under pressure
You will have access to:
#Post
#FNB
#LI-NN2
Are you interested to take the step? We look forward to engaging with you further. Apply now!
Job Details
Take note that applications will not be accepted on the below date and onwards, kindly submit applications ahead of the closing date indicated below.
12/03/26
All appointments will be made in line with FirstRand Group’s Employment Equity plan. The Bank supports the recruitment and advancement of individuals with disabilities. In order for us to fulfill this purpose, candidates can disclose their disability information on a voluntary basis. The Bank will keep this information confidential unless we are required by law to disclose this information to other parties.