Manager, Information Risk & Business Resilience

Overview

Manager, Information Risk & Business Resilience

Job Overview

Business Segment:
Group Functions

Location:

ZA, GP, Johannesburg, 30 Baker Street

Provide specialist advisory and leadership across the Group in implementing and managing the Information Risk and Business Resilience Frameworks. Ensures all business units are equipped to identify, mitigate, and treat information and technology service continuity risks in alignment with ethical, regulatory, and strategic standards.

• A degree in Information Technology or Risk Management (Required).

• 3-4 years experience in defending information from the risk of accidental or intentional unauthorized use, access, modification, disclosure, dissemination or destruction of information resources, which would compromise the confidentiality, integrity and availability of information which would potentially harm the business. Experience in analysing the risk posture on other related non-financial risks such as Cyber Risk, Technology Risk, Third Party Risks, Regulatory Compliance Risk, Legal Risk.
• 3-4 years experience and exposure to the delivery of the Business Continuity lifecycle (i.e. impact analysis, recovery strategy formulation, plan development, testing and exercising and governance and awareness related activities), engaging multiple stakeholders across the bank to fulfil value-chain and business line requirements for the business resilience (BR) programme.
• 3–4 years in information security and non-financial risk domains.
• 3–4 years in business continuity lifecycle delivery and/ or
• 3–4 years in Service Management delivery

• Lead Group-wide risk assessments, reporting, and remediation efforts.
• Drive information risk and business disruption awareness, training, and stakeholder engagement.
• Coordinate with Client Segments, Group Technology Functions, and Corporate Functions. Eg.
  Coordinator, DR Coordinator, Backup & Restore Coordinator
• Manage incident response planning, breach investigations and reporting and develop and execute fit-for-purpose technology resilience programmes.
• Maintain the relevance of Standards, Playbooks and operational guidelines like Runbook templates.
• Engage with external vendors (like SaaS Providers) and regulators, as/ when required by accountable officers of the bank.
• Monitor and report on technology resilience metrics to governance forums.

• Adopting Practical Approaches
• Articulating Information
• Challenging Ideas
• Conveying Self-Confidence
• Developing Expertise
• Documenting Facts
• Examining Information
• Following Procedures
• Interacting with People
• Managing Tasks
• Pursuing Goals